tarnish

tarnish tarnish는 Chrome 확장 프로그램의 보안 검토를 지원하는 정적 분석 도구입니다. 일반적인 반복 작업을 자동화하여 잠재적인 보안 취약점을 신속하게 식별할 수 있도록 도와줍니다. 이 도구는 여기에서 확인할 수 있는 연구 블로그 게시물과 함께 제공됩니다. 설정 과정을 거치고 싶지 않다면 https://thehackerblog.com/tarnish/에서 도구를 바로 사용할 수 있습니다. 다듬어지지 않은 공지 및 참고 사항 이것은 다듬어지지 않은 릴리스입니다...

blackbox.ai.security.analysis

이 저장소에는 README가 없습니다...

Kaspersky_CVE-2024-3094

Security Review: CVE-2024-3094 XZ Utils Backdoor 저자: Сушин Иван 날짜: 2026년 3월 1. 프로젝트 설명 이 저장소는 CVE-2024-3094XZ Utils 라이브러리의 공급망 공격 취약점에 대한 전체 보안 검토 결과를 포함합니다. 작업 목표: 위협 모델링Threat Modeling 수행 코드의 정적 및 동적 분석 수행 자동화 테스트 패키지 개발 위험 최소화를 위한 권장 사항 준비 산출물: 파일| 설명 ---|--- docs/ThreatModel.md| STRIDE 위협 모델...

sec_review_cve-2024-3094

CVE-2024-3094 오픈 소스 취약점에 대한 전체 보안 검토가 수행되었습니다. 획득한 데이터를 기반으로 다음이 준비되었습니다: 1. 'ThreatModel + SecurityReview' 보고서 – 위협, 공격 경로, 위험 평가 및 공격 표면 축소를 위한 권장 사항에 대한 상세 설명. 2. 검증 테스트 패키지 – 패치 적용 후 취약점 존재/부재를 확인하는 자동화된 테스트 세트. 보고서는 ReportFinal.pdf 파일로 제공됩니다. 출처: 취약한 버전의...

EUVD-2026-77623

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. "New plugins are reviewed before they enter the...

CVE-2026-70563

creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:34+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:17+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:45:40+00:00|...

CVE-2026-69881

creationtimestamp| type| source ---|---|--- 2026-09-08 22:06:40+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:05:55+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:49:23+00:00|...

CVE-2026-69310

creationtimestamp| type| source ---|---|--- 2026-09-08 22:05:41+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:05:19+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:49:05+00:00|...

CVE-2026-83969

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:53+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:39+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:46:04+00:00|...

CVE-2026-50349

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:23+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:13+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:51:45+00:00|...

CVE-2026-69816

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:20+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:11+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:50:41+00:00|...

CVE-2026-72944

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:54+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:46+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:20:53+00:00|...

CVE-2026-69599

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:53+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:45+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:45:06+00:00|...

CVE-2026-68850

creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:07+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:57+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:55:09+00:00|...

CVE-2026-69805

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:53+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:42+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:50:54+00:00|...

CVE-2026-69797

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:19+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:12+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:46:53+00:00|...

VCG — Updated!

==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...

CVE-2026-20231

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20317

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...