tarnish

tarnish tarnish 是一款静态分析工具，旨在帮助研究人员对 Chrome 扩展进行安全审查。它自动化了大量常规的繁琐工作，并帮助您快速识别潜在的安全漏洞。此工具配套的研究博客文章可在此处找到：https://thehackerblog.com/kicking-the-rims-a-guide-for-securely-writing-and-auditing-chrome-extensions/index.html。如果您不想费心设置，可以直接使用位于 https://thehackerblog.com/tarnish/ 的在线工具。 未打磨的说明与注意事项...

Kaspersky_CVE-2024-3094

Revisión de seguridad: CVE-2024-3094 Backdoor de XZ Utils Autor: Sushin Ivan Fecha: Marzo 2026 1. Descripción del proyecto Este repositorio contiene los resultados de una revisión de seguridad completa de la vulnerabilidad CVE-2024-3094 Ataque a la cadena de suministro en la biblioteca XZ Utils...

sec_review_cve-2024-3094

Был проведен полный security review уязвимости CVE-2024-3094 с открытым исходным кодом. На основании полученных данных подготовлены: 1. Отчёт «ThreatModel + SecurityReview» – детальное описание угроз, пути эксплуатации, оценка риска и рекомендации по уменьшению поверхности атаки. 2. Пакет...

blackbox.ai.security.analysis

此存储库没有 README。...

EUVD-2026-77623

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. "New plugins are reviewed before they enter the...

CVE-2026-70563

creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:34+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:17+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:45:40+00:00|...

CVE-2026-69881

creationtimestamp| type| source ---|---|--- 2026-09-08 22:06:40+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:05:55+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:49:23+00:00|...

CVE-2026-69310

creationtimestamp| type| source ---|---|--- 2026-09-08 22:05:41+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:05:19+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:49:05+00:00|...

CVE-2026-83969

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:53+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:39+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:46:04+00:00|...

CVE-2026-50349

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:23+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:13+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:51:45+00:00|...

CVE-2026-69816

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:20+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:11+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:50:41+00:00|...

CVE-2026-72944

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:54+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:46+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:20:53+00:00|...

CVE-2026-69599

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:53+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:45+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:45:06+00:00|...

CVE-2026-68850

creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:07+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:57+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:55:09+00:00|...

CVE-2026-69805

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:53+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:42+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:50:54+00:00|...

CVE-2026-69797

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:19+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:12+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:46:53+00:00|...

CVE-2026-20231

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20317

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20319

CVE-2026-20319 is a buffer management vulnerability (CWE-119) in Cisco Secure Workload , affecting both SaaS and on-premises deployments. The flaw involves buffer overflows and out-of-bounds writes , discovered during Cisco's internal security review. The CVSS 3.1 score is 7.5 (High) with a vecto...