tarnish

tarnish tarnish — это инструмент статического анализа, предназначенный для помощи исследователям в аудите безопасности расширений Chrome. Он автоматизирует большую часть рутинной работы и помогает быстро выявить потенциальные уязвимости безопасности. Этот инструмент сопровождает исследовательскую...

Kaspersky_CVE-2024-3094

Sicherheitsüberprüfung: CVE-2024-3094 XZ Utils Backdoor Autor: Ivan Sushin Datum: März 2026 1. Projektbeschreibung Dieses Repository enthält die Ergebnisse einer vollständigen Sicherheitsüberprüfung der Schwachstelle CVE-2024-3094 Supply-Chain-Angriff in der Bibliothek XZ Utils. Ziel der Arbeit:...

sec_review_cve-2024-3094

È stata condotta una revisione completa della sicurezza della vulnerabilità open source CVE-2024-3094. Sulla base dei dati raccolti, sono stati preparati: 1. Report «ThreatModel + SecurityReview» – descrizione dettagliata delle minacce, percorsi di sfruttamento, valutazione del rischio e...

blackbox.ai.security.analysis

Questo repository non contiene un README...

CVE-2026-20317

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20231

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20319

CVE-2026-20319 is a buffer management vulnerability (CWE-119) in Cisco Secure Workload , affecting both SaaS and on-premises deployments. The flaw involves buffer overflows and out-of-bounds writes , discovered during Cisco's internal security review. The CVSS 3.1 score is 7.5 (High) with a vecto...

CVE-2026-20315

CVE-2026-20315 is a set of improper access control vulnerabilities (CWE-284) in Cisco Secure Workload , affecting both SaaS and on-premises deployments. The flaws span authorization, authentication, privilege escalation, and access control bypasses, carrying a CVSS 10.0 rating. They were discover...

CVE-2026-20359

CVE-2026-20359 affects Cisco Crosswork products, classified as a CWE-522 (insufficiently protected credentials) issue discovered during an internal security review. CVSS 3.1 scores it 9.9 CRITICAL (network vector, low privileges required). No specific affected component, version, or patch details...

PT-2026-78498

Name of the Vulnerable Software and Affected Versions Cisco Secure Workload affected versions not specified Description Improper input validation issues exist within the software. These issues are categorized under CWE-20, which refers to a failure to properly validate input before it is processe...

PT-2026-78502

Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description Multiple issues related to insufficiently protected credentials were identified during an internal security review. These issues fall under the category of CWE-522, which refers to th...

PT-2026-78492

Name of the Vulnerable Software and Affected Versions Cisco Secure Workload affected versions not specified Description Multiple issues exist involving the improper neutralization of special elements, which can lead to security risks. This is categorized under CWE-74, which refers to the failure ...

PT-2026-78501

Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description An internal security review identified issues related to external control of the file system. This involves a collection of vulnerabilities where an external actor could potentially...

CVE-2026-20313

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20271

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

EUVD-2026-53476

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20312

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

EUVD-2026-53469

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20303

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

EUVD-2026-53460

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities. The...