CVE-2026-114197

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

CVE-2026-114197 Deserialization of untrusted data in capa

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

tenrec-capa (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-114197 via flare-capa (9.2.1)

flare-capa PYPI version 9.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on flare-capa and may be impacted: - tenrec-capa =0.1.0, =0.1.1 Source cves: CVE-2026-114197 Source advisory: MEND:CVE-2026-114197...

CVE-2026-114197

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

CVE-2026-114197

Mandiant FLARE capa releases prior to version 10.0.0 are vulnerable to arbitrary code execution due to the deserialization of untrusted data . This vulnerability occurs when the capa utility processes a specially crafted .viv or .exe.viv workspace. The CVSS v4.0 score for this issue is 8.7 (HIGH)...

EUVD-2026-106923

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

PT-2026-120246

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

Mandiant FLARE Capa deserialization injection vulnerability

Versions of Mandiant FLARE prior to Capa 10.0.0 contain a deserialization injection vulnerability. This vulnerability arises from the Capa tool’s inability to properly handle untrusted data during the processing of specially crafted .viv or .exe.viv workstations, potentially leading to arbitrary...

capa

Sitio web | Descargar | Interfaz web capa detecta capacidades en archivos ejecutables. Lo ejecutas contra un PE, ELF, módulo .NET, shellcode o un sandbox report y te dice lo que cree que el programa puede hacer. Por ejemplo, puede sugerir que el archivo es un backdoor, es capaz de instalar...

EUVD-2025-3182

Malicious code in bioql PyPI...

EUVD-2022-25108

Malicious code in bioql PyPI...

CVE-2022-1832

The CaPa Protect WordPress plugin through 0.5.8.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and disable the applied protection...

CVE-2025-23436

Cross-Site Request Forgery CSRF vulnerability in capa Wp-Scribd-List wp-scribd-list allows Stored XSS.This issue affects Wp-Scribd-List: from n/a through = 1.2...

CVE-2025-23436

Cross-Site Request Forgery CSRF vulnerability in capa Wp-Scribd-List wp-scribd-list allows Stored XSS.This issue affects Wp-Scribd-List: from n/a through = 1.2...

CVE-2025-23436 WordPress Wp-Scribd-List plugin <= 1.2 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in capa Wp-Scribd-List wp-scribd-list allows Stored XSS.This issue affects Wp-Scribd-List: from n/a through = 1.2...

CVE-2025-23436

CVE-2025-23436 describes a CSRF-to-Stored XSS in the WordPress plugin Wp-Scribd-List (vulnerable through 1.2). Exploitation, per the CVSS metrics, requires user interaction and can impact confidentiality, integrity, and availability. Affected software: Wp-Scribd-List

PT-2024-8434

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the handling of HCI EV IO CAPA REQUEST in the Linux kernel's hci event component. If HCI EV IO CAPA REQUEST is received while HCI OP READ REMOTE EXT FEATURES is y...

amigosdelacapadesevilla.com Improper Access Control vulnerability OBB-3791839

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

capa-elec.com Cross Site Scripting vulnerability OBB-3753799

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-22841 · Rild · Rild

Name of the Vulnerable Software and Affected Versions: RILD versions prior to SMR Jul-2023 Release 1 Description: A heap out of bound write issue in the IpcRxUsimPhoneBookCapa of RILD allows attackers to execute arbitrary code. Recommendations: For versions prior to SMR Jul-2023 Release 1, update...