393 matches found
The_Automotive_Threat_Modeling_Template
Background A threat modeling workshop for automotive-related technologies requires DFDs with custom elements, tailored threats and specific recommendations. The lack of a specific template for automotive threat modeling brought about the development of the Automotive Threat Modeling Template, whi...
xtride
XTRIDE: N-gram-based Practical Type Recovery Introduction We present XTRIDE, an improved n-gram-based cf. STRIDE approach on type recovery for binaries that focuses on practicality: highly optimized throughput and actionable confidence scores allow for deployment in automated pipelines. When...
setcred
FreeBSD setcred2 — research artifacts This subdirectory collects the write-up and working exploits for the setcred2 stack buffer overflow in FreeBSD 14.x kernel. The vulnerability itself is fully documented in setcred.txt. The short version: kernsetcredcopyinsuppgroups uses sizeofgroups where...
threatmap
threatmap Static IaC threat modeler that parses Terraform, CloudFormation, and Kubernetes manifests and produces structured threat model reports using STRIDE, MITRE ATT&CK, or PASTA frameworks. No network calls, no cloud credentials, fully offline. Runs as a CLI, REST API, or containerized servic...
AI-Threat-Modeler
AI Threat Modeler Point it at a codebase. Get a code-grounded threat model back — ready to review, challenge, and act on. The parts the code can't see — the business context and the architecture behind it — are where you and your architects come in. Upload a ZIP or import a GitHub repo, and AI...
CVE-2026-93244
A flaw was found in the Linux kernel's simpledrm driver. The driver fails to properly validate the computed display buffer stride, the byte width of a row of pixels, against the maximum integer limit. A local user could exploit this flaw to trigger calculation errors, leading to a kernel crash an...
CVE-2026-111991 WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection
A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.init of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of t...
CVE-2026-111991 WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection
A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.init of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of t...
CVE-2026-111991
A security vulnerability exists in WongKinYiu yolov9 0.1 within the ONNX Metadata Handler component. The flaw specifically affects the DetectMultiBackend extunderscore extunderscoreinit extunderscore extunderscore function in the models/common.py file. By manipulating the names/stride arguments, ...
Astra Linux – Vulnerability in libraw
In LibRaw, there is a out-of-bounds read vulnerability within the “simpledecoderow” function libraw\src\x3f\x3futilspatched.cpp, which can be triggered by an image with a large rowstride field...
stride-gpt
STRIDE GPT è uno strumento di threat modelling basato sull'IA che sfrutta i Large Language Models LLM per generare modelli di minaccia e alberi di attacco per una determinata applicazione basandosi sulla metodologia STRIDE. Gli utenti forniscono i dettagli dell'applicazione, come il tipo di...
UBUNTU-CVE-2026-16271
hw/display/qxl: validate primary surface stride against width...
SUSE CVE-2026-93244
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: simpledrm: Improve stride validation Validate the computed stride against the maximum value INTMAX...
Linux Distros Unpatched Vulnerability : CVE-2026-93244
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sysfb: simpledrm: Improve stride validation Validate the computed stride against the maximum value INTMAX. CVE-2026-93244 Note that Nessus relies on the...
AZL-103853 CVE-2026-93244 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: simpledrm: Improve stride validation Validate the computed stride against the maximum value INTMAX...
DEBIAN-CVE-2026-93244
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: simpledrm: Improve stride validation Validate the computed stride against the maximum value INTMAX...
CVE-2026-93244
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: simpledrm: Improve stride validation Validate the computed stride against the maximum value INTMAX...
UBUNTU-CVE-2026-93244
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: simpledrm: Improve stride validation Validate the computed stride against the maximum value INTMAX...
