static-analysis

This repository lists static analysis tools for all programming languages, build tools, config files and more. The focus is on tools which improve code quality such as linters and formatters. The official website, analysis-tools.dev is based on this repository and adds rankings, user comments, an...

android-check

Android Check Static code analysis plugin for Android project. Usage Modifications in /build.gradle: buildscript repositories jcenter dependencies ... classpath 'com.noveogroup.android:check:1.2.5' ... Modifications in //build.gradle: apply plugin: 'com.noveogroup.android.check' Configuration...

CVE-2019-9053

Fixed it bcz of https://tryhackme.com/room/easyctf : enjoy Critical Issues Fixed 1. Python 2 to Python 3 Compatibility Old: print "string" New: print"string" Changed all print statements to print functions Updated string formatting to use f-strings 2. Deprecated optparse Library Old: import...

phpstan

PHPStan - Herramienta de Análisis Estático de PHP PHPStan se centra en encontrar errores en tu código sin ejecutarlo realmente. Detecta clases enteras de errores incluso antes de que escribas pruebas para el código. Acerca PHP a los lenguajes compilados en el sentido de que la corrección de cada...

An Empirical Security Analysis of Open-Source Software Used in Onboard Satellite Systems

The use of open-source software OSS in satellite flight systems is increasing as missions adopt reusable frameworks, shared libraries, and community-maintained components. While this accelerates development, it also introduces software-security risks into systems where patching is costly and...

What Is the Difference between Me and You? Benchmarking the Quality Gap between Human-Written and AI-Generated Code

AI coding assistants are becoming co-authors of production software, yet their evaluation centers on functional correctness, leaving open whether their code differs from human code in the quality dimensions dominating lifecycle cost. We compare human-written and AI-generated code at scale: 787,56...

Wicked Problem, Parsimonious Solution: Securing Electric Vehicle Charging Station Software

Electric vehicle charging infrastructure presents a suite of novel cyber-physical threats. Among this infrastructure, charging stations are the most vulnerable elements. The software in the charging station supply equipment is particularly vulnerable. Currently, the software is an attack surface...

MINI-HR32-H8VF-CHMV

Bulletin has no description...

MINI-5F66-88VH-2HFW

Bulletin has no description...

MINI-F832-GHG9-RXMV

Bulletin has no description...

MINI-X4WH-9862-QMP4

Bulletin has no description...

Statistical Analysis of Executability and Program Equivalence in Decompilation for IoT Vulnerability Detection

Internet of Things IoT devices handle sensitive privacy-related information such as user audio, video, and authentication data, making it essential to detect vulnerabilities in their firmware. Decompilation, a key detection technique, has recently attracted attention because Large Language Models...

phpstan v2.2.8

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

CodeClimate Configuration File - Exposure Detection

Detected CodeClimate configuration file, exposing code quality settings and excluded paths. !/usr/bin/env python3 -- coding: utf-8 -- """Detected CodeClimate configuration file, exposing code quality settings and excluded paths.""" from kittysploit import from lib.protocols.http.httpclient import...

code-quality-intelligence (>=1.5.0, <=1.6.2), edubotics-core (>=0.1.3, <=0.1.7) +8 more potentially affected by CVE-2026-55443 via langchain (0.2.16)

langchain PYPI version 0.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - code-quality-intelligence =1.5.0, =0.1.3, =0.0.1, =0.1.6, =0.97.1, =1.0.1, =0.3.21, =0.3.48 Source cves: CVE-2026-55443 Source advisory:...

CVE-2026-1516

GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content...

BIT-GITLAB-2026-1516 Improper Control of Generation of Code ('Code Injection') in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content...

Linux Distros Unpatched Vulnerability : CVE-2026-1516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality...

PT-2026-32413

GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content...

EUVD-2026-20793

GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content...