58 matches found
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
whispers
Whispers "내 작은 새들은 어디에나 있어, 북쪽에도 있지. 그들은 나에게 가장 이상한 이야기들을 속삭여." - 바리스 경 Whispers는 하드코딩된 자격 증명과 위험한 함수를 찾기 위해 다양한 일반적인 데이터 형식을 분석하도록 설계된 정적 코드 분석 도구입니다. Whispers는 CLI에서 실행하거나 CI/CD 파이프라인에 통합할 수 있습니다. 감지 항목 비밀번호 API 토큰 AWS 키 개인 키 해시된 자격 증명 인증 토큰 위험한 함수 민감한 파일 지원되는 형식 Whispers는 구조화된 텍스트 파서로 설계되었으며, ...
Weggli_rules_SSTIC2023
다음은 선별된 weggli 쿼리 목록입니다 쿼리를 하나씩 읽고 사용하거나, 배치로 실행할 수 있습니다: 사용법: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ 세 가지 범주가 있습니다: 1. 위험한 함수: 예를 들어 strcpy, system 등.. 2. 스택: 스택 및 기타 항목에서의 복사를 감지하려고 시도합니다.. 3. malloc: malloc 함수에서 오버플로를 찾습니다. 자체 문서화되어 있으므로 직접 읽을 수 있습니다...
CVE-2026-14501
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions...
CVE-2026-14501
Summary: CVE-2026-14501 affects IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0. The issue arises from the use of potentially dangerous functions without sufficient restrictions, enabling an attacker to execute arbitrary code or access sensitive information. What is affected: IBM Db2 Ge...
EUVD-2026-45305
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions...
CVE-2026-14501 Use of Potentially Dangerous Functionthat in IBM Db2 Genius Hub
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions...
PT-2026-60874
Name of the Vulnerable Software and Affected Versions IBM Db2 Genius Hub versions 1.1 through 1.1.2 IBM Agentics version 1.0 Description An attacker could execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions. Recommendations ...
CVE-2026-14501: Use of Potentially Dangerous Function
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions...
EUVD-2026-37737
picklescan before 1.0.4 fails to block pkgutil.resolvename, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls. Remote attackers can invoke any blocked function such as os.system, builtins.exec, or subprocess.call to achieve remote...
CVE-2026-3490 picklescan - Universal Blocklist Bypass via pkgutil.resolve_name
picklescan before 1.0.4 fails to block pkgutil.resolvename, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls. Remote attackers can invoke any blocked function such as os.system, builtins.exec, or subprocess.call to achieve remote...
CVE-2026-3490
CVE-2026-3490 affects picklescan prior to version 1.0.4, where the blocklist of dangerous functions is bypassed via pkgutil.resolve_name. The underlying issue is an incomplete blocklist that allows indirect REDUCE calls to resolve dangerous functions, enabling remote code execution (e.g., os.syst...
Important: postgresql16
Issue Overview: Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use searchpath to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions...
CVE-2026-9009
The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.7.2 via the filtercontent function. This is due to passing the attacker-supplied 'callbackraw' shortcode attribute directly into calluserfunc with n...
The vulnerability of the software interface of Fortinet’s FortiManager device management center and FortiAnalyzer event monitoring and analysis tool allows a attacker to trigger a service failure.
The vulnerability of the Fortinet FortiManager device management interface and the FortiAnalyzer event monitoring and analysis tool is related to the use of potentially dangerous functions. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending...
EUVD-2026-24135
In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system command execution. An authenticated user with permission to edit PHP content can bypass this filtering, resulting in full remote code...
CVE-2026-31019
In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system command execution. An authenticated user with permission to edit PHP content can bypass this filtering, resulting in full remote code...
The vulnerability of embedded software developed by Qualcomm, related to the use of dangerous methods or functions, allows attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of embedded software developed by Qualcomm relates to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...
The vulnerability of software for online simulation and optimization of AVEVA Process Optimization processes, related to the use of potentially dangerous functions, allows a hacker to enhance their privileges.
The vulnerability of software for online simulation and optimization of AVEVA Process Optimization processes is related to the use of potentially dangerous functions. Exploiting this vulnerability can allow attackers to enhance their privileges...
