Improper Handling of Windows ::DATA Alternate Data Stream

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA fil…CVE-2024-43033Jpress · CVSS 8.8 · 1.0% likely

   Jpress

2. Algernon: Server-side script source disclosure on Windows via NTFS filenameCVE-2026-52792xyproto · CVSS 8.7 · 0.6% likely

   Xyproto

3. Improper Handling of Windows: DATA Alternate Data StreamCVE-2025-3941Tridium · CVSS 5.4 · 0.5% likely

   Tridium

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.