flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2017-1000117

CVE-2017-1000117 utilisation $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git quand git rencontre un problème, ifconfig est exécuté...

CVE-2018-1000199

CVE-2018-1000199 Код ptrace в Linux виртуализует доступ к отладочным регистрам, и в коде виртуализации неправильно обрабатываются ошибки. Это означает, что если записать недопустимое значение, скажем, в DR0, внутреннее состояние отслеживания точек останова ядра может повредиться, несмотря на то,...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Vulnérabilité de contournement d'authentification dans Wordpress Really Simple Security sur Docker Description Les plugins Really Simple Security Free, Pro et Pro Multisite pour WordPress, versions 9.0.0 à 9.1.1.1, sont affectés par une vulnérabilité de contournement...

Testability-CVE-2014-1266

TestableSecurity Ceci est une petite preuve de concept qui extrait la fonction vulnérable SSLVerifySignedServerKeyExchange de la bibliothèque libsecurityssl d'Apple pour démontrer que le code de signature est facilement testable unitairement de manière isolée. Bien qu'il y ait eu des discussions...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2025-62168

CVE-2025-62168 Раскрытие информации в Squid Proxy при обработке ошибок Сканер Обнаружение и PoC «Из-за сбоя при редактировании учетных данных HTTP-аутентификации Squid подвержен атаке с раскрытием информации. Серьезность: Эта проблема позволяет скрипту обойти защиту безопасности браузера и узнать...

CVE-2025-62168

CVE-2025-62168 Раскрытие информации в Squid Proxy при обработке ошибок Сканер Обнаружение и PoC "Из-за сбоя при редактировании учётных данных HTTP-аутентификации Squid уязвим к атаке с раскрытием информации. Серьёзность: Эта проблема позволяет скрипту обойти защиту браузера и узнать учётные данны...

CVE-2019-9053

Corrigé grâce à https://tryhackme.com/room/easyctf : amusez-vous bien Problèmes critiques corrigés 1. Compatibilité Python 2 vers Python 3 Ancien : print "string" Nouveau : print"string" Modifié toutes les instructions print en fonctions print Mise à jour du formatage des chaînes pour utiliser le...

CVE-2026-14316 Heap buffer overflow in boks_sshd revoked-key error handling

The revoked-key error path builds a human-readable failure reason using sprintf into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf writes the full message, it can write past the end of the heap allocation...

CVE-2026-14316

The boks_sshd software contains a heap buffer overflow vulnerability within its revoked-key error handling path. The root cause is the use of sprintf() to construct a human-readable failure reason into a heap buffer that is insufficiently sized for the final formatted message. This results in dat...

CVE-2026-66248

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks...

CVE-2026-66248

The HCL iControl software is affected by an Improper Error Handling vulnerability. This flaw could allow an unauthenticated attacker to trigger verbose database and system errors. Such errors may disclose sensitive internal infrastructure details , which could be leveraged to plan advanced target...

EUVD-2026-90815

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks...

CVE-2026-66248 HCL iControl is affected by an Improper Error Handling vulnerability

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks...

Rocky Linux 8 [CIQ] Security Update: libecap / libecap-debuginfo / libecap-debugsource / libecap-devel / etc (crlsa-2025_19107)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202519107 advisory. squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-ipadic / etc Multiple Vulnerabilities (crlsa-2022_7119)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227119 advisory. mysql: Server: DML multiple unspecified vulnerabilities CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413 mysql:...

Rocky Linux 10.1 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource (crlsa-2025_21002)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202521002 advisory. squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has extracted the precedi...

Rocky Linux 9 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource (crlsa-2025_20935)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520935 advisory. squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has extracted the preceding...