entropystrip

entropystrip A fast CLI tool for Windows PE triage, sliding-window entropy analysis, and detecting concealed payloads in loaders and crypters. . \ / / | ../ // ||| | / \ \ / \ | |/ | | | | / | | / /| /| || /| // / /|| || || / / / || / / || Why EntropyStrip? Most quick-triage tools compute...

CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - Missing Authorization via activateplugin Description The Square theme for WordPress is vulnerable to unauthorized plugin activation due to a missing capability check on the activateplugin function called via an AJAX action in versions up to, and including, 2.0.0...

frevvomapexec

frevvomapexec frevvomapexec is a script to verify the existence of a blind SQL injection vulnerability by injecting a delay of your choosing in seconds in Square 9 GlobalForms 6.2. To verify the vulnerability is legitimate, the end user will be required to do math e.g. Subtracting the smaller...

DEBIAN-CVE-2026-115347

Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parselinktext that allows remote attackers to cause denial of service through unbalanced square brackets. Attackers can submit markdown containing long runs of unmatched brackets to mistune.html, triggering...

CVE-2026-115347

Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parselinktext that allows remote attackers to cause denial of service through unbalanced square brackets. Attackers can submit markdown containing long runs of unmatched brackets to mistune.html, triggering...

CVE-2026-115349 Mistune 3.0.0 before 3.3.0 Denial of Service via Nested Bracket Parsing

Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the parselinktext function in src/mistune/helpers.py. Attackers can submit markdown with deeply nested square brackets triggering quadratic parsing time, exhausting server CPU with small crafted...

CVE-2026-115349

The Mistune markdown library, versions 3.0.0 through 3.2.x , is vulnerable to an algorithmic complexity denial of service (DoS) in the parse_link_text function located in src/mistune/helpers.py. An attacker can submit a small, specially crafted markdown request containing deeply nested square bra...

CVE-2026-115347 Mistune before 3.3.0 Quadratic Denial of Service via parse_link_text

Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parselinktext that allows remote attackers to cause denial of service through unbalanced square brackets. Attackers can submit markdown containing long runs of unmatched brackets to mistune.html, triggering...

EUVD-2026-108416

Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parselinktext that allows remote attackers to cause denial of service through unbalanced square brackets. Attackers can submit markdown containing long runs of unmatched brackets to mistune.html, triggering...

CVE-2026-115347

The Mistune markdown processor, in versions prior to 3.3.0 , is susceptible to an inefficient algorithmic complexity vulnerability within the parse_link_text function. Remote attackers can trigger a denial of service (DoS) by submitting markdown containing long runs of unmatched square brackets t...

square__retrofit_CVE-2018-1000850_2-4-0

Retrofit Type-safe HTTP client for Android and Java by Square, Inc. For more information please see the website. Download Download the latest JAR or grab via Maven: com.squareup.retrofit2 retrofit 2.4.0 or Gradle: implementation 'com.squareup.retrofit2:retrofit:2.4.0' Snapshots of the development...

Retrofit-1

Retrofit Type-safe HTTP client for Android and Java by Square, Inc. For more information please see the website. Download Download the latest JAR or grab via Maven: com.squareup.retrofit2 retrofit 2.4.0 or Gradle: implementation 'com.squareup.retrofit2:retrofit:2.4.0' Snapshots of the development...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

CVE-2026-110367

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

CVE-2026-110367

The APIExperts Square for WooCommerce plugin (versions up to and including 4.7.5 ) is vulnerable to a Broken Access Control issue. This Missing Authorization vulnerability (CWE-862) allows for the exploitation of incorrectly configured access control security levels within the plugin. The impact ...

CVE-2026-110367 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

EUVD-2026-102229

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin APIExperts Square for WooCommerce versions = 4.7.5...

CLEANSTART-2026-OI68179 BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli

Security vulnerability affects the openjdk11 package. The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli...

CVE-2026-109391

Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML via the POST /api/1.0/symbolication endpoint. When occurrences referencing the attacker-controlled symbolication UUID are symbolicated, the stored...