trailofbits kayıtları
trailofbits üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %83,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-184 Incomplete List of Disallowed Inputs6
- CWE-295 Improper Certificate Validation1
- CWE-325 Missing Cryptographic Step1
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-502 Deserialization of Untrusted Data1
- CWE-693 Protection Mechanism Failure1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-39969İstismar yok | uthenticode signature validation bypass vulnerabilitytrailofbits · uthenticode · CWE-347 | Kritik9,8 | — | %0,6 | 9 Ağu 2023 |
39İzleyin | CVE-2026-14535İstismar yok | Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()trailofbits · fickling · CWE-693 | Kritik9,8 | — | %0,6 | 4 Tem 2026 |
35İzleyin | CVE-2026-22609İstismar yok | Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklisttrailofbits · fickling · CWE-184 | Yüksek8,9 | — | %0,6 | 9 Oca 2026 |
35İzleyin | CVE-2026-14534İstismar yok | Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)trailofbits · fickling · CWE-184 | Yüksek8,8 | — | %0,6 | 4 Tem 2026 |
35İzleyin | CVE-2026-22607İstismar yok | Fickling Blocklist Bypass: cProfile.run()trailofbits · fickling · CWE-184 | Yüksek8,9 | — | %0,5 | 9 Oca 2026 |
35İzleyin | CVE-2026-22606İstismar yok | Fickling has a bypass via runpy.run_path() and runpy.run_module()trailofbits · fickling · CWE-184 | Yüksek8,9 | — | %0,5 | 9 Oca 2026 |
35İzleyin | CVE-2026-22608İstismar yok | Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detectiontrailofbits · fickling · CWE-184 | Yüksek8,9 | — | %0,4 | 9 Oca 2026 |
35İzleyin | CVE-2026-22612İstismar yok | Fickling vulnerable to detection bypass due to "builtins" blindnesstrailofbits · fickling · CWE-502 | Yüksek8,9 | — | %0,3 | 9 Oca 2026 |
30İzleyin | CVE-2023-40012İstismar yok | uthenticode EKU validation bypasstrailofbits · uthenticode · CWE-325 | Yüksek7,5 | — | %0,2 | 9 Ağu 2023 |
30İzleyin | CVE-2026-33753İstismar yok | Improper Certificate Validation in rfc3161-clienttrailofbits · rfc3161-client · CWE-295 | Yüksek7,5 | — | %0,2 | 8 Nis 2026 |
28İzleyin | CVE-2025-67747İstismar yok | Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules listtrailofbits · fickling · CWE-184 | Yüksek7,1 | — | %0,3 | 15 Ara 2025 |
28İzleyin | CVE-2025-67748İstismar yok | Fickling has Code Injection vulnerability via pty.spawn()trailofbits · fickling · CWE-94 | Yüksek7,1 | — | %0,3 | 15 Ara 2025 |
- CVE-2023-3996939İzleyin
uthenticode signature validation bypass vulnerability
KritikCVSS 9,8İstismar yokEPSS %1trailofbits · uthenticode9 Ağu 2023
- CVE-2026-1453539İzleyin
Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()
KritikCVSS 9,8İstismar yokEPSS %1trailofbits · fickling4 Tem 2026
- CVE-2026-2260935İzleyin
Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist
YüksekCVSS 8,9İstismar yokEPSS %1trailofbits · fickling9 Oca 2026
- CVE-2026-1453435İzleyin
Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)
YüksekCVSS 8,8İstismar yokEPSS %1trailofbits · fickling4 Tem 2026
- CVE-2026-2260735İzleyin
Fickling Blocklist Bypass: cProfile.run()
YüksekCVSS 8,9İstismar yokEPSS %1trailofbits · fickling9 Oca 2026
- CVE-2026-2260635İzleyin
Fickling has a bypass via runpy.run_path() and runpy.run_module()
YüksekCVSS 8,9İstismar yokEPSS %0trailofbits · fickling9 Oca 2026
- CVE-2026-2260835İzleyin
Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
YüksekCVSS 8,9İstismar yokEPSS %0trailofbits · fickling9 Oca 2026
- CVE-2026-2261235İzleyin
Fickling vulnerable to detection bypass due to "builtins" blindness
YüksekCVSS 8,9İstismar yokEPSS %0trailofbits · fickling9 Oca 2026
- CVE-2023-4001230İzleyin
uthenticode EKU validation bypass
YüksekCVSS 7,5İstismar yokEPSS %0trailofbits · uthenticode9 Ağu 2023
- CVE-2026-3375330İzleyin
Improper Certificate Validation in rfc3161-client
YüksekCVSS 7,5İstismar yokEPSS %0trailofbits · rfc3161-client8 Nis 2026
- CVE-2025-6774728İzleyin
Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list
YüksekCVSS 7,1İstismar yokEPSS %0trailofbits · fickling15 Ara 2025
- CVE-2025-6774828İzleyin
Fickling has Code Injection vulnerability via pty.spawn()
YüksekCVSS 7,1İstismar yokEPSS %0trailofbits · fickling15 Ara 2025