418 matches found
GitHub Security Lab: CodeQL query for disabled revocation checking
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Golang : Add MongoDb NoSQL injection sinks
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Java : CWE-548 - J2EE server directory listing enabled
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java]: CWE-523 Insecure HSTS configuration
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Java: CWE-297 Insecure JavaMail SSL configuration
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: CodeQL query for SpEL injections
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: CodeQL query to detect Server-Side Template Injections (JavaScript)
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: CodeQL query for unsafe TLS versions
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: CodeQL query for MVEL injections
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Golang : Add Email Content Injection query
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: CodeQL query to detect JNDI injections
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java] CWE-939 - Address improper URL authorization
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: CPP: Missing/incomplete TLS server certificate hostname validation
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: CodeQL query to detect open Spring Boot actuator endpoints
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: gagliardetto: Query to detect incorrect conversion between numeric types
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Add check for disabled HTTPOnly setting in Tomcat
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Java: CWE-532 sensitive info logging
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: CodeQL query to detect SSRF in Python
This bug was reported directly to GitHub Security Lab...
Azure Sphere Security Research Challenge Now Open
The Azure Sphere Security Research Challenge is an expansion of Azure Security Lab, announced at Black Hat in August 2019. At that time, a select group of talented researchers was invited to come and do their worst, emulating criminal hackers in a customer-safe cloud environment. This new researc...