Comparison Overview
PRAN-RFL Group
PRAN-RFL Group
PRAN-RFL Center, 105, Middle Badda, Dhaka, BD, 1212
Last Update: 01/04/2026
PRAN RFL Group, one of the most reputed conglomerates in Bangladesh, is in market since 1981. It started mainly with Foundry business and gradually diversified to Light Engineering, PVC Fittings, Plastics, Food and Beverage and Agro-Processing. It has it's marketing and...
Molson Coors Beverage Company
250 S Wacker Dr, Chicago, Illinois, US, 60606
Last Update: 01/04/2026
From Coors Light, Miller Lite, Molson Canadian, Carling and Staropramen to Coors Banquet, Blue Moon Belgian White, Leinenkugel’s Summer Shandy, Vizzy, Creemore Springs and more, our 16,000+ employees across the globe make and market many of the most beloved beverage bra...
Compliance Ranges Comparison
PRAN-RFL Group
Molson Coors Beverage Company
Benchmark & Cyber Underwriting Signals
Incidents vs Food and Beverage Services Industry Avg (This Year)
No incidents recorded for PRAN-RFL Group in 2026.
Incidents vs Food and Beverage Services Industry Avg (This Year)
No incidents recorded for Molson Coors Beverage Company in 2026.
Incident History - PRAN-RFL Group (X = Date, Y = Severity)
PRAN-RFL Group cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Molson Coors Beverage Company (X = Date, Y = Severity)
Molson Coors Beverage Company cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
PRAN-RFL Group
Molson Coors Beverage Company
FAQ
Latest Global CVEs
Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).