517 matches found
semantic_firewall
Semantic Firewall sfw is a static analyzer for Go source. It builds SSA with golang.org/x/tools/go/ssa, rewrites each function into a canonical IR, and fingerprints the function as the SHA-256 of that IR. On top of the fingerprint: sfw diff compares two files function by function. It matches...
high-pcode
High-level Pcode PcodeAST output in Ghidra Ghidra uses a processor independent representation called Pcode. It is easy to grab and work with in scripts Instruction.getPcode. Lesser known is that the decompiler exposes a higher-level Pcode representation. The problem with using Pcode for...
VulnCheck KEV: CVE-2026-3045
The Appointment Booking Calendar — Simply Schedule Appointments plugin for WordPress is vulnerable to unauthorized access of sensitive data in all versions up to and including 1.6.9.29. This is due to two compounding weaknesses: 1 a non-user-bound publicnonce is exposed to unauthenticated users...
AC-Aware Steady-State Security Region Characterization Via Exclusion Refinement
As active power dispatch becomes increasingly coupled with reactive power support and voltage security in modern power systems, AC security regions AC-SRs under exact steady-state AC power flow AC-PF constraints provide valuable insights into admissible operating boundaries and security margins f...
gokart
GoKart - Análisis Estático de Seguridad para Go GoKart es una herramienta de análisis estático para Go que encuentra vulnerabilidades utilizando la forma SSA asignación única estática del código fuente Go. Es capaz de rastrear el origen de variables y argumentos de funciones para determinar si la...
CVE-2026-92245
The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the 'recursive' parameter. This makes it possible for unauthenticated attackers to extract customer PII — including names, email addresses, pho...
EUVD-2026-90464
The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the 'recursive' parameter. This makes it possible for unauthenticated attackers to extract customer PII — including names, email addresses, pho...
PT-2026-103666
Name of the Vulnerable Software and Affected Versions Simply Schedule Appointments versions prior to 1.6.12.33 Description An issue exists that allows unauthenticated attackers to extract customer personally identifiable information PII, such as names, email addresses, phone numbers, and custom...
CVE-2026-92245: Missing Authorization
The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the 'recursive' parameter. This makes it possible for unauthenticated attackers to extract customer PII — including names, email addresses, pho...
PT-2026-103049
The Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.12.27 via the 'ssa locale' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to include and execute...
CVE-2026-90928: Uncontrolled Resource Consumption
File Browser through 2.63.23 contains a memory exhaustion vulnerability in the subtitle conversion endpoint that loads entire subtitle files into memory without size limits. Authenticated attackers with download permission can request conversion of large .srt, .ass, or .ssa files and exhaust serv...
Slackware Linux 15.0 / current libpcap Multiple Vulnerabilities (SSA:2026-249-01)
The version of libpcap installed on the remote host is prior to 1.10.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-249-01 advisory. New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
Malicious code in dajouka-ssa-t9a (npm)
Source: amazon-inspector e59cf2b749557aa341d10f9df914795c195bf4e01fcb339656c76b8f0b00c92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dajouka-faa-ssa (npm)
Source: amazon-inspector 0afd3f263ecdfa3a5559991b60bd078fbcc58d0311ef2046af854e7dc23b6404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dajouka-faass-ssa (npm)
Source: amazon-inspector 90840cd5109513e3cdef42e127db588e6e3daa77a378fd164b3dc98e4809d32f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dajouka-fass-ssa (npm)
Source: amazon-inspector 16d9d15ccb31a73e4aaa4e96d35d1ef92f9e284b77ff3a124a73d151353be030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dajouka-faaa-ssa (npm)
Source: amazon-inspector 27eda1bb5dc5514bba300ea490c6c8b4faa8e4217636585d356d045d03674755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview dajouka-fass-ssa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview dajouka-faa-ssa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview dajouka-faaa-ssa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...