Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 59
Wyczyść filtryPicklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval
Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper
Picklescan missing detection when calling built-in python library function timeit.timeit()
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions
Picklescan has a missing detection when calling built-in python profile.Profile.runctx
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
picklescan missing detection by simple obfuscation of a `builtins.eval` call
Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
picklescan has Arbitrary file read using `io.FileIO`
Picklescan vulnerable to Arbitrary File Writing
Picklescan Bypasses Unsafe Globals Check using pty.spawn
Picklescan has Incomplete List of Disallowed Inputs
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length
Picklescan does not block ctypes
Picklescan is missing detection when calling built-in python ensurepip._run_pip
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Picklescan is missing detection when calling built-in Python cProfile.runctx
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand
Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config
picklescan vulnerable to arbitrary file create using logging.FileHandler
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.