CVE-2025-5319

CVE-2025-5319 Official publication by USOM is pending...

advisories

SBA Research Security Advisories Security advisories published by SBA Research...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...

heaphopper

heaphopper HeapHopper is a bounded model checking framework for Heap-implementations. Overview Setup sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopper pip install ...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...

CVE-2024-5535

CVE-2024-5535 PoC - OpenSSL NPN Buffer Overread Note: We did not discover this, we only made a PoC for this based on the publication. https://nvd.nist.gov/vuln/detail/cve-2024-5535...

CVE-2025-4822

CVE-2025-4822 Official publication by USOM is awaited...

CVE-2025-4688

CVE-2025-4688 USOMによる公式発表が待たれています。...

CVE-2025-5329

CVE-2025-5329 Official publication by USOM is awaited...

CVE-2025-2301

CVE-2025-2301 USOMによる公式発表が待たれています。...

Statement

Statement Regarding the CVE-2021-36593 and CVE-2021-36594, I would like to mention that I only had submitted a request to split the CVE-ID. 2 years ago The CVE-IDs will be published in the coming months as there is currently no available update. We have postponed the publishing process for the ti...

WordPress WPeMatico RSS Feed Fetcher plugin < 2.8.27 - Contributor+ Post Publication and Author Spoofing vulnerability

Contributor+ Post Publication and Author Spoofing vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WPeMatico RSS Feed Fetcher versions 2.8.27...

CVE-2026-89001

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another account, allowing users with contributor-level access and above to publish posts live and set any registered user,...

CVE-2026-89001 WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another account, allowing users with contributor-level access and above to publish posts live and set any registered user,...

CVE-2026-89001

The WPeMatico RSS Feed Fetcher WordPress plugin, in versions before 2.8.27 , contains a vulnerability where it fails to verify if a user running a feed campaign has permission to publish content or attribute posts to other accounts. This allows users with contributor-level access and above to pub...

CVE-2026-89001 WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another account, allowing users with contributor-level access and above to publish posts live and set any registered user,...

CVE-2025-4686

CVE-2025-4686 USOMによる公式発表が待たれています。...

CVE-2025-2404

CVE-2025-2404 USOMによる公式発表が待たれています。...

CVE-2026-98098

A NULL pointer dereference exists in the Linux kernel 's TIPC (Transparent Inter-Process Communication) protocol. The vulnerability occurs in tipc_named_node_up() when the number of local publications exceeds TIPC_MAX_PUBL (65535). Under these conditions, protocol service types are not inserted i...

CVE-2026-84742

The Events Calendar WordPress plugin, affecting versions 6.15.0 through 6.17.4 , contains an incorrect authorization vulnerability. The plugin fails to verify the necessary capabilities required to publish content when creating or updating entries via its REST API . This allows users with restric...