Research
16 CVEsMobasi's security and engineering team audits open-source tools and publishes research in digital forensics.
Sentinel update: CVE records published for Arelle, Detect-It-Easy, and prior findings
CVE.org now lists fourteen Mobasi-related Sentinel records, including new Arelle and Detect-It-Easy disclosures and CVE links for earlier public findings.
Sentinel update: command injection vulnerabilities remediated in UAC
Three command injection vulnerabilities in UAC (Unix-like Artifacts Collector) have been remediated upstream via our Sentinel program.
Sentinel update: Sleuth Kit and ALEAPP fixes are now public
New public Sentinel disclosures now include three Sleuth Kit findings and an ALEAPP NQ Vault path traversal / RCE fix.
Sentinel update: vulnerabilities remediated in NSA's Ghidra, Hayabusa, Memprocfs, & more
Since our initial January disclosures, additional vulnerabilities have been publicly disclosed and remediated across more forensic tools.
Mobasi discloses 3 vulnerabilities in bulk_extractor and unfurl
Our Sentinel program publicly disclosed three security vulnerabilities across two forensics tools.
Announcing Sentinel: Securing open-source digital forensics tools
We're providing free security reviews for open-source forensics tools.