blackbox.ai.security.analysis

此存储库没有 README。...

tarnish

tarnish tarnish 是一款静态分析工具，旨在帮助研究人员对 Chrome 扩展进行安全审查。它自动化了大量常规的繁琐工作，并帮助您快速识别潜在的安全漏洞。此工具配套的研究博客文章可在此处找到：https://thehackerblog.com/kicking-the-rims-a-guide-for-securely-writing-and-auditing-chrome-extensions/index.html。如果您不想费心设置，可以直接使用位于 https://thehackerblog.com/tarnish/ 的在线工具。 未打磨的说明与注意事项...

Kaspersky_CVE-2024-3094

Security Review: CVE-2024-3094 XZ Utils 后门 作者: 苏辛·伊万 日期: 2026年3月 1. 项目描述 本仓库包含对漏洞 CVE-2024-3094 （XZ Utils 库中的供应链攻击）的完整安全审查结果。 工作目标： 进行威胁分析（Threat Modeling） 执行静态和动态代码分析 开发自动测试包 制定风险最小化建议 工件： 文件| 描述 ---|--- docs/ThreatModel.md| STRIDE 威胁模型 + 图表 docs/ReportFinal.pdf| 最终报告（57+ 页） exploit/PoC.py|...

sec_review_cve-2024-3094

Был проведен полный security review уязвимости CVE-2024-3094 с открытым исходным кодом. На основании полученных данных подготовлены: 1. Отчёт «ThreatModel + SecurityReview» – детальное описание угроз, пути эксплуатации, оценка риска и рекомендации по уменьшению поверхности атаки. 2. Пакет...

EUVD-2026-77623

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. "New plugins are reviewed before they enter the...

CVE-2026-70563

creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:34+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:17+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:45:40+00:00|...

CVE-2026-69881

creationtimestamp| type| source ---|---|--- 2026-09-08 22:06:40+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:05:55+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:49:23+00:00|...

CVE-2026-69310

creationtimestamp| type| source ---|---|--- 2026-09-08 22:05:41+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:05:19+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:49:05+00:00|...

CVE-2026-83969

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:53+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:39+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:46:04+00:00|...

CVE-2026-50349

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:23+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:13+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:51:45+00:00|...

CVE-2026-69816

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:20+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:11+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:50:41+00:00|...

CVE-2026-72944

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:54+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:46+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:20:53+00:00|...

CVE-2026-69599

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:53+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:45+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:45:06+00:00|...

CVE-2026-68850

creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:07+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:57+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:55:09+00:00|...

CVE-2026-69805

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:53+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:42+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:50:54+00:00|...

CVE-2026-69797

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:19+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:12+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:46:53+00:00|...

VCG — Updated!

==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...

CVE-2026-20317

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20231

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...