tirreno

tirreno tirreno はセキュリティフレームワークです。 tirreno tir.ˈrɛ.no は、製品を脅威、不正、悪用から理解、監視、保護するのに役立ちます。従来のサイバーセキュリティがインフラストラクチャとネットワーク境界に焦点を当てているのに対し、ほとんどの侵害は、ファイアウォール、SIEM、WAF、その他の防御を迂回する、侵害されたアカウントとアプリケーションロジックの悪用を通じて発生します。tirreno は、脅威が実際に発生する場所、つまり製品の内部で検出します。 tirreno は、手書きで、依存関係が少なく、「ローテク」な PHP/PostgreSQL...

tirreno

tirreno tirreno 是开源的安全分析平台。 tirreno tir.ˈrɛ.no 帮助您理解、监控并保护您的应用程序免受网络威胁、账户接管、机器人和滥用行为的侵害。传统网络安全侧重于基础设施和网络边界，但大多数入侵都是通过受损账户和应用程序逻辑滥用发生的，这些攻击可以绕过防火墙、SIEM、WAF 及其他防御措施。 tirreno 在威胁实际发生的地方——您的产品内部——检测威胁。它为内部或外部应用程序增加了一个安全层，通过分析用户行为、账户活动、字段变更历史以及基础设施工具无法检测的业务逻辑滥用，来识别恶意活动。 tirreno 是一款依赖极少、采用"低技术"路线的...

CVE-2026-64857

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

CVE-2026-64857 tirreno has Session Fixation in Login Authentication

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

EUVD-2026-74954

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

CVE-2026-64857

tirreno , a security framework, is affected by a session fixation vulnerability in versions prior to 0.10.0 . During login, tirreno validates credentials and establishes the authenticated session but fails to call session_regenerate_id(), leaving the session identifier unchanged before and after ...

CVE-2026-64857 tirreno has Session Fixation in Login Authentication

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

EUVD-2025-26417

Malicious code in bioql PyPI...

SQL Injection

Overview tirreno/tirreno is an open-source security analytics platform Affected versions of this package are vulnerable to SQL Injection via the columns0data parameter in the /admin/loadUsers API endpoint. An attacker can execute arbitrary SQL commands by supplying crafted input that is directly...

CVE-2025-55472

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...

CVE-2025-55472

Tirreno v0.9.5 contains a SQL Injection vulnerability in the /admin/loadUsers API endpoint due to unsafe handling of the columns[0][data] input, which is directly used in SQL queries without proper validation or parameterization. The issue could allow arbitrary SQL execution, with the current sou...

CVE-2025-55472

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...

CVE-2025-55472

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...

CVE-2025-55472

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...

Tirreno 安全漏洞

tirreno is a security analyzer from tirreno open source. A security vulnerability exists in Tirreno version v0.9.5, which stems from improper handling of the columns0data parameter and could lead to an SQL injection attack...