github/securitylab

Issues

• C#: Add query for insecure certificate validation

  #838 opened a month ago by intrigus-lgtm
  1

• Python: Pycurl SSL Disabled

  #835 opened a month ago by porcupineyhairs
  2

• [Python]: Unicode DoS Bug Slaying

  #824 opened 6 months ago by Sim4n6
  6

• [Python]: Unicode DoS

  #813 opened 8 months ago by Sim4n6
  9

• Go: CORS Bypass due to incorrect checks

  #834 opened 2 months ago by porcupineyhairs
  1

• CPP: Disabled SSL certificate verification

  #836 opened 2 months ago by porcupineyhairs
  6

• Python: CORS Bypass

  #833 opened 5 months ago by porcupineyhairs
  9

• [C/C++]: DOS through Decompression

  #779 opened 3 months ago by am0o0
  4

• [Java]: JWT decoding without verification

  #783 opened 3 months ago by am0o0
  5

• [wall-of-fame]: Finding Gadgets for CPU Side-Channels

  #817 opened 3 months ago by xcorail
  1

• [JS]: Signing and verifying JWT signature with a constant key

  #799 opened 3 months ago by am0o0
  12

• Another rule for NULL dereference

  #826 opened 4 months ago by catenacyber
  9

• [Java]: additional path injection sinks

  #831 opened 4 months ago by am0o0
  6

• [Java]: DOS through Decompression

  #774 opened 4 months ago by am0o0
  5

• Java: Arbitrary user-controlled read/write on user-controlled path

  #839 opened 4 months ago by intrigus-lgtm
  2

• Python : Arbitrary code execution due to Js2Py

  #832 opened 5 months ago by porcupineyhairs
  11

• [JS]: Overly Permissive CORS Query

  #793 opened 5 months ago by maikypedia
  12

• Test bug

  #842 opened 5 months ago by mrrajputhacker
  2

• Python: WTForms Denial of Service

  #822 opened 5 months ago by porcupineyhairs
  7

• [Kotlin]: Add support for Ktor framework

  #805 opened 5 months ago by am0o0
  2

• [C#]: DOS through Decompression

  #778 opened 5 months ago by am0o0
  5

• Python: New code/command execution sinks

  #818 opened 5 months ago by am0o0
  12

• [JS]: Decoding JWT without any signature Verification

  #784 opened 5 months ago by am0o0
  14

• [JS]: Env Injection

  #807 opened 5 months ago by am0o0
  7

• CPP: Windows leaked handles

  #827 opened 6 months ago by bananabr
  13

• [Ruby]: DOS through Decompression

  #776 opened 6 months ago by am0o0
  13

• [Ruby]: Denial of Service due to the use of uncontrained integer/float

  #823 opened 6 months ago by Sim4n6
  7

• [JS]: DOS through Decompression

  #775 opened 6 months ago by am0o0
  6

• Javascript/Python: Tokens built from predictable UUIDs

  #816 opened 6 months ago by bananabr
  8

• [JS]: New command execution sinks(Execa, shelljs and dynamic import)

  #788 opened 6 months ago by am0o0
  11

• [Go]: DOS through Decompression

  #773 opened 8 months ago by am0o0
  17

• [Go]: Query To Detect Denial Of Service Vulnerability

  #809 opened 9 months ago by Malayke
  9

• [Python]: DOS through Decompression

  #777 opened 9 months ago by am0o0
  6

• [Swift]: Unsafe Unpacking Query

  #802 opened 9 months ago by maikypedia
  7

• [Ruby]: Insecure Randomness Query

  #795 opened 10 months ago by maikypedia
  7

• [Go]: fasthttp model for XSS, SSRF, open redirect

  #786 opened 10 months ago by am0o0
  9

• Python: Add Code Injection Sinks for Pandas

  #814 opened 10 months ago by R3x
  4

• [Golang]: SSTI Method Confusion

  #812 opened 10 months ago by aydinnyunus
  5

• [JS]: Regex Global Flag in Test Function

  #810 opened 10 months ago by aydinnyunus
  5

• [Ruby]: JWT Security Queries

  #781 opened a year ago by maikypedia
  5

• Java: Insecure Loading of Class in Android App without Package Signature Checking

  #800 opened a year ago by masterofnow
  14

• [JS]: Web Cache Deception

  #811 opened a year ago by aydinnyunus
  3

• [Go]: Web Cache Deception - Fiber / GoChi / HTTPRouter

  #808 opened a year ago by aydinnyunus
  6

• [wall-of-fame]: Finding Insecure TrustManagers and Disabled Hostname Verification with CodeQL

  #804 opened a year ago by intrigus-lgtm
  1

• Web Cache Deception CodeQL

  #801 opened a year ago by aydinnyunus
  10

• [Python]: New FileSystem Access sinks

  #791 opened a year ago by am0o0
  7

• [JS]: added sqlite and TypeORM SQLI Sinks

  #790 opened a year ago by am0o0
  18

• [Go]: Improved JWT query, JWT decoding without verification

  #785 opened a year ago by am0o0
  9

• [Go]: New File System Access Sinks

  #782 opened a year ago by am0o0
  11

• [Python]: Add unsafe deserialization sinks

  #772 opened a year ago by maikypedia
  5