slither-mcp

Slither MCP Server 一个基于模型上下文协议（MCP）的服务器，利用 Slither 为 Solidity 智能合约提供静态分析能力。 概述 此 MCP 服务器封装了 Slither 静态分析功能，使其可通过模型上下文协议进行访问。它能够分析 Solidity 项目（Foundry、Hardhat 等），并生成关于合约、函数、继承层次结构等的全面元数据。 您也可以将 Slither MCP 作为易于使用的 Slither API 用于其他场景。 特性 缓存 ：Slither 运行结果会缓存到...

[SECURITY] Fedora 45 Update: foundry-1.2.0-2.fc45

This tool aims to extract much of what makes GNOME Builder an IDE into a library and companion command-line tool...

evm-audit-helpers

evm-audit-helpers 概述 evm-audit-helpers 是一个精心整理的 Solidity 代码片段、Foundry 脚本和测试模板集合，旨在加速 EVM 智能合约安全审计。该仓库打包了针对常见审计问题的可复用构建模块，如重入攻击、存储布局不匹配和 gas 优化陷阱，使审计人员和开发者能够专注于逻辑而非样板代码。 核心目标： 加快审计准备 ，提供现成的检查和模式。 确保审计报告的一致性 ，通过提供标准测试套件。 促进学习 ，通过文档完善的示例和最佳实践指南。 功能特性 类别| 描述| 主要文件 ---|---|--- 重入检查器| 辅助修饰符、nonReentran...

DeFiHackLabs

DeFi Hacks Reproduce - Foundry 使用 Foundry 复现 DeFi 黑客事件。 包含 879 起事件。 让我们共同守护 Web3 安全！加入 Discord Notion：过往 DeFi 黑客事件 101 例根因分析 交易调试工具 免责声明： 本内容仅作为展示过往 DeFi 黑客事件的概念验证。其严格用于教育目的，不应被解读为鼓励或支持任何形式的非法活动或实际黑客攻击尝试。所提供的信息仅供信息参考和学习之用，任何基于此内容采取的行动均由个人自行承担责任。使用此信息应遵守适用的法律、法规和道德标准。 目录 快速开始 支持我们的人 捐赠我们 过往 DeFi...

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889 , carries a CVSS score of 10.0. "Missing authentication for critical function...

EUVD-2026-82594

Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82593

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85917

Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85889

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85917

A server-side request forgery (SSRF) vulnerability in Azure AI Foundry allows an unauthorized, network-based attacker to elevate privileges. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating no privileges required, low complexity, and a high confide...

CVE-2026-85889

Azure AI Foundry is affected by a missing authentication vulnerability in a critical function, allowing an unauthenticated attacker to elevate privileges over a network. The flaw is rated CRITICAL (CVSS 3.1: 10.0) with a vector of network-based, low complexity, no privileges required, no user int...

GHSA-5MQ7-RWHJ-4FH9 Steeltoe: Header-forwarded client cert lacks proof of private-key possession

Summary When Steeltoe's certificate-based authorization UseCertificateAuthorization is configured, the default configuration of the middleware relies on the X-Client-Cert HTTP header to identify the client certificate, without verifying private-key possession. This header is not stripped by commo...

Steeltoe: Header-forwarded client cert lacks proof of private-key possession

Summary When Steeltoe's certificate-based authorization UseCertificateAuthorization is configured, the default configuration of the middleware relies on the X-Client-Cert HTTP header to identify the client certificate, without verifying private-key possession. This header is not stripped by commo...

CVE-2026-81868 Steeltoe: Header-forwarded client cert lacks proof of private-key possession

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, Steeltoe.Security.Authorization.Certificate deployments using AddOrgAndSpacePolicies and UseCertificateAuthorization trust the public certificate supplied i...

CVE-2026-81868 Steeltoe: Header-forwarded client cert lacks proof of private-key possession

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, Steeltoe.Security.Authorization.Certificate deployments using AddOrgAndSpacePolicies and UseCertificateAuthorization trust the public certificate supplied i...

CVE-2026-81868

Steeltoe (open-source cloud-native application libraries) is vulnerable in Steeltoe.Security.Authorization.Certificate prior to version 4.3.0 . When using AddOrgAndSpacePolicies() and UseCertificateAuthorization(), the framework trusts the public certificate supplied in the X-Client-Cert request ...

EUVD-2026-81899

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, Steeltoe.Security.Authorization.Certificate deployments using AddOrgAndSpacePolicies and UseCertificateAuthorization trust the public certificate supplied i...

Azure AI Foundry Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

Azure AI Foundry Elevation of Privilege Vulnerability

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85889: Missing Authentication for Critical Function

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...