publications

Publications from Calif MAD Bugs: Month of AI-Discovered Bugs Apple Internals A series reverse-engineering Apple's internals. Security Research A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Security Audits Shamir39 Security Audit, commissioned by an unnamed client. Mbed...

publications

Publications A home for publications, including slides/papers, proof-of-concepts, videos and tools. For blog posts, see the elttam blog, and for our services, see our website. Date| Type| Event| Title| Resources ---|---|---|---|--- 2026| adv| -| Home Assistant Authenticated Arbitrary File Read vi...

openwifipass

OpenWifiPass An open source implementation of the grantor role in Apple's Wi-Fi Password Sharing protocol. Disclaimer OpenWifiPass is experimental software and is the result of reverse engineering efforts by the Open Wireless Link project. The code serves solely documentary and educational...

publications

Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...

Publications

Publications A list of published research documents...

publications

Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-54623 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-54623 Source advisory: OSV:PYSEC-2026-3822...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-54625 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-54625 Source advisory: OSV:PYSEC-2026-3824...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-61663 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-61663 Source advisory: OSV:PYSEC-2026-3823...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-54622 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-54622 Source advisory: OSV:PYSEC-2026-3820...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-63003 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-63003 Source advisory: OSV:PYSEC-2026-3821...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-54624 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-54624 Source advisory: OSV:PYSEC-2026-3826...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-54625 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-54625 Source advisory: OSV:GHSA-FWJF-M4QW-9F2X...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-54623 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-54623 Source advisory: OSV:GHSA-8JJ7-4V57-FRF5...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-61663 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-61663 Source advisory: OSV:GHSA-8QJ2-C6Q4-F399...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-63003 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-63003 Source advisory: OSV:GHSA-6X92-6VX4-5FWR...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-54624 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-54624 Source advisory: OSV:GHSA-VGXM-H9GX-H9W7...

djangocms-highlightjs (0.4.0), djangocms-lab-publications (0.1.4) potentially affected by CVE-2026-54622 via django-cms (3.3.1)

django-cms PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - djangocms-highlightjs 0.4.0 - djangocms-lab-publications 0.1.4 Source cves: CVE-2026-54622 Source advisory: OSV:GHSA-4XFR-4P46-GC6P...

WordPress Manage Calameo Publications 1.1.0 - Cross-Site Scripting Detection

WordPress Manage Calameo Publications 1.1.0 is vulnerable to reflected cross-site scripting via thickboxcontent.php and the attachmentid parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Manage Calameo Publications 1.""" from kittysploit import from lib.protocols.http.httpclient...

CVE-2026-53445 Wekan: Authorization bypass in copyBoard DDP method allows any user to copy private boards

Wekan is open source kanban built with Meteor. Prior to 9.32, the Wekan copyBoard Meteor DDP method in server/publications/boards.js copies a board by caller-supplied board ID without checking this.userId, membership, or admin access. Any authenticated user can copy a private board they are not a...