EUVD-2026-109249

Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.1...

EUVD-2026-109247

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through 4.18.1...

CVE-2026-94075

The Tribulant Software Newsletters (newsletters-lite) WordPress plugin, versions 4.18.1 and earlier , is vulnerable to a PHP Object Injection flaw. This issue stems from the deserialization of untrusted data , which can allow an attacker to perform Object Injection . The documents do not provide ...

CVE-2026-111402

The Tribulant Software Newsletters (newsletters-lite) WordPress plugin versions 4.18.1 and below is vulnerable to an SQL Injection flaw due to the improper neutralization of special elements used in SQL commands. This vulnerability allows an attacker to execute unauthorized SQL commands. No speci...

CVE-2026-26198

CVE-2026-26198...

Nexora

Nexora Nexora is an AI-driven enterprise endpoint governance and security intelligence system that monitors software usage across machines, applies policy-based risk classification, and generates structured behavioral and security reports. It is designed for environments where organizations need...

jsonorg-fp1

json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688 but does not invoke the vulnerable class. The vulnerability can therefore not be exploited for a DoS attack. Metadata-based software composition analyses will produce a false positive, while...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

archiver-MOTW-support-comparison

Comparison of MOTW Mark of the Web propagation support of archiver software for Windows English | Japanese Background On 3 March 2022, Microsoft announced that the default behavior of Office applications on Windows will be changed to block macros in files from the internet such as email attachmen...

jsonorg-fp2

json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688. It does invoke the vulnerable class, but the input data is hardcoded and not suitable to trigger a DoS attack. The vulnerability can therefore not be exploited for a DoS attack. Both...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

CVE-2017-3248

CVE-2017-3248...

dep-scan

Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

yari

YARI - YARA Interactive Interactive debugger for the YARA language written in Rust. Debugger directly calls libyara avoiding emulation to get the most accurate results. 🚀 Features: Call functions from modules Get the value of module constants Evaluate complex expressions Check the matches of...

malicious_extension_sentry

Malicious Chrome/Edge Extensions Database An automatically updated database of Chrome extensions removed from the Chrome Web Store for containing malware, policy violation, or bundling unwanted software 🌐 Live Dashboard Real-time search, filtering by threat category, and source reports, built on...

archivo-syxe05-snat

SyXe'05 / Snat Reverse Engineering Archive Historical archive of reverse engineering and unpacking tutorials originally written under the aliases SyXe'05 and later Snat. The texts were originally published in various technical communities of the time, mainly within CracksLatinos , and have now be...

binary-cartography

Binary Cartography Technical webinars on reverse engineering, malware analysis, and software protection. This repository hosts materials for Binary Cartography , Tim's independent webinar series on binary security. The focus is practical reverse engineering, malware analysis, and software...

hackrf

HackRF This repository contains hardware designs and software for HackRF, a low cost, open source Software Defined Radio platform. photo by fd0 from https://github.com/fd0/hackrf-one-pictures principal author: Michael Ossmann [email protected] Information on HackRF and purchasing HackRF:...

aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 Description : allows remote authenticated users to execute arbitrary commands via the setting menu of Sotfware Store. Affected version : All = 6.6.6 Information To make this PoC, I just installed the software using docker-compose Vulnerability Type : Remote...