Comparison Overview
Element Six

Element Six
Element Six Global Innovation Centre, Didcot, Oxfordshire, OX11 0QR, GB
Last Update: 03/01/2026
Element Six is a global leader in the design, development and production of synthetic diamond advanced materials. Part of the De Beers Group, Element Six is an independently managed global company with primary manufacturing facilities in Ireland, Germany, South Africa, ...

Rencol Components Ltd.
Unit 2, Avonbridge Trading Estate, Bristol, BS11 9QD, GB
Last Update: 01/04/2026
Following 100 years of successful design and manufacturing experience in plastic and metals, Rencol Components has built a truly global supply chain - rapidly expanding our range of high-quality, competitively-priced industrial components. Rencol has developed a mature...
Compliance Ranges Comparison

Element Six







Rencol Components Ltd.






Benchmark & Cyber Underwriting Signals
Incidents vs Industrial Machinery Manufacturing Industry Avg (This Year)
No incidents recorded for Element Six in 2026.
Incidents vs Industrial Machinery Manufacturing Industry Avg (This Year)
No incidents recorded for Rencol Components Ltd. in 2026.
Incident History - Element Six (X = Date, Y = Severity)
Element Six cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Rencol Components Ltd. (X = Date, Y = Severity)
Rencol Components Ltd. cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Element Six

Rencol Components Ltd.
FAQ
Latest Global CVEs
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.
goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.