l4j-fp1

falso positivo de log4shell Este es un proyecto web simple con una vulnerabilidad log4shell saneada. Para una versión sin sanear, consulte https://github.com/scabench/l4j-tp1/. El proyecto define un servicio get scabench.HelloWorldService simple que devuelve una cadena de texto plano hello world...

jsonorg-fp3

json.org CVE-2022-45688 误报 该项目包含一个带有 CVE-2022-45688 的 json.org 依赖项。 它的确会调用易受攻击的类，但输入数据经过了净化处理（使用一种简单的方法对 字符进行计数，从而估算将要生成的 DOM 树的最大深度，并强制执行该深度必须小于 1000 的前提条件）， 因此该漏洞无法被利用来发动 DoS 攻击。 基于元数据和基于调用图的软件成分分析都会产生误报。 要精确检测应用程序是否易受攻击，需要更复杂的 过程间数据流 / 污点分析。 请注意，有一个漏洞验证测试用于演示该漏洞，该测试（以及通过 mvn test 进行的构建）...

jsonorg-fp2

json.org CVE-2022-45688 误报 该项目包含一个依赖于 json.org 的依赖项，该依赖项存在 CVE-2022-45688 漏洞。它确实调用了有漏洞的类，但输入数据是硬编码的，不适合触发DoS攻击。因此，该漏洞无法被利用进行DoS攻击。 基于元数据和基于调用图的软件组合分析都会产生误报。要精确检测应用程序是否易受攻击，需要更复杂的跨过程数据流/污点分析。 注意，存在一个漏洞验证测试来演示该漏洞，该测试（以及使用 mvn test 的构建）会失败。关于测试的工作原理，请参阅 https://github.com/scabench/jsonorg-tp1。...

jsonorg-fp1

json.org CVE-2022-45688 误报 该项目包含一个 json.org 依赖，存在 CVE-2022-45688，但 未 调用易受攻击的类。 因此，该漏洞无法被利用进行 DoS 攻击。 基于元数据的软件成分分析会产生误报，而 基于调用图的分析不会将此应用程序标记为易受攻击。 运行软件成分分析 有多个 sh 脚本来运行不同的分析，结果报告可以在 scan-results 中找到。 生成 SBOM pom.xml 中有一个插件，用于生成 CycloneDX 格式的 SBOM。 为此，请运行 mvn cyclonedx:makePackageBom，SBOM 可在 target...

CVE-2026-80615

A flaw was found in the Linux kernel's dstmetadata component. When copying tunnel information and options within the tundstunclone function, a compiler warning for a potential memory buffer overflow is triggered. This warning is a false positive, as memory is correctly allocated, but it can lead ...

Linux Distros Unpatched Vulnerability : CVE-2026-80639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmap...

Linux Distros Unpatched Vulnerability : CVE-2026-80640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/fwctl: Fix fortifypanic Fix a runtime assertion in cxlctlgetsupportedfeatures. Fortify complains that it is potentially overflowing the entries array per...

Linux Distros Unpatched Vulnerability : CVE-2026-80615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which ...

IntelligentProcessLifecycle

IntelligentProcessLifecycle El ciclo de vida inteligente de procesos de los defensores cibernéticos activos Descripción Este GitHub aloja los archivos del póster relacionados con las categorías de falsos positivos y errores en los servicios de operaciones de seguridad. El objetivo es definir un...

FalsePositives

Este repositorio no tiene un README...

ffufPostprocessing

Ffuf: Post-elaborazione Purtroppo - nonostante il flag "-ac", ffuf tende a produrre molte voci irrilevanti. È per questo che ho creato uno strumento di post-elaborazione per filtrare quelle voci. Inoltre, ho visto molte voci pertinenti rimosse quando veniva usato "-ac" - specialmente quando ffuf...

ESCepcion

🛡️ ESCepcion Auditor di Active Directory Certificate Services ESCepcion è uno strumento open source per l'audit e la valutazione delle vulnerabilità nelle infrastrutture di Active Directory Certificate Services AD CS. È progettato per automatizzare l'individuazione dei percorsi di escalation dei...

CVE-2026-80639

In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...

AZL-98186 CVE-2026-80616 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

UBUNTU-CVE-2026-80640

In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix fortifypanic Fix a runtime assertion in cxlctlgetsupportedfeatures. Fortify complains that it is potentially overflowing the entries array per countedbylenumentries. Quiet the false positive by initializing...

CVE-2026-80639

In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...

UBUNTU-CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-80639 cxl/test: Fix __fortify_panic

In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...