heaphopper

heaphopper HeapHopper is a bounded model checking framework for Heap-implementations. Overview Setup sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopper pip install ...

CVE-2025-5319

CVE-2025-5319 Official publication by USOM is pending...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

🛡️ php2shell-enterprise-hardening CVE-2026-109618 / CVE-2026-...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...

ApostropheCMS: Import API bypasses publication roles for protected content

Review scope and evidence limits Package: @apostrophecms/import-export, version 3.7.0. Release tag reviewed: @apostrophecms/[email protected], commit 9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce September 30, 2026. Current main reviewed: 5ce3732be0ebdebb4db0f8ef160c81e8671157e6. The importer, gzip...

GHSA-5M22-7PFQ-VP65 ApostropheCMS: Import API bypasses publication roles for protected content

Review scope and evidence limits Package: @apostrophecms/import-export, version 3.7.0. Release tag reviewed: @apostrophecms/[email protected], commit 9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce September 30, 2026. Current main reviewed: 5ce3732be0ebdebb4db0f8ef160c81e8671157e6. The importer, gzip...

NPM: ApostropheCMS: Import API bypasses publication roles for protected content

NPM: ApostropheCMS: Import API bypasses publication roles for protected content vulnerability discovered by ? in WordPress npm apostrophe versions 4.34.0...

EUVD-2026-105107

ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content...

CVE-2025-4688

CVE-2025-4688 Official publication by USOM is awaited...

CVE-2026-113649

The ApostropheCMS Node.js content management system is vulnerable to a publication role bypass in the import-export module (prior to 3.7.1) and the core system (prior to 4.34.0). An editor capable of importing an enabled content type but lacking the required publication role can leverage import w...

CVE-2026-113649 ApostropheCMS: Import API bypasses publication roles for protected content

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of core ApostropheCMS, an editor who can import an enabled content type but lacks its stronger publication role can cause import write helpers to create, replace, or remove...

CVE-2026-112956

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate-import continuation accepts client-controlled replacement choices without binding them to a user-owned server-side analysis or authorizing the canonical target. On an...

CVE-2026-112956

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate-import continuation accepts client-controlled replacement choices without binding them to a user-owned server-side analysis or authorizing the canonical target. On an...

CVE-2025-5329

CVE-2025-5329 Official publication by USOM is awaited...

PT-2026-118452

Name of the Vulnerable Software and Affected Versions ApostropheCMS import-export module versions prior to 3.7.1 Description The import-export module allows duplicate-import continuation to accept replacement choices controlled by the client without binding them to a server-side analysis or...

CVE-2025-2301

CVE-2025-2301 Official publication by USOM is awaited...

CVE-2025-2404

CVE-2025-2404 Official publication by USOM is expected...

CVE-2025-4686

CVE-2025-4686 The official publication by USOM is expected...

Statement

Statement Regarding the CVE-2021-36593 and CVE-2021-36594, I would like to mention that I only had submitted a request to split the CVE-ID. 2 years ago The CVE-IDs will be published in the coming months as there is currently no available update. We have postponed the publishing process for the ti...