Commits

Breadcrumbs

History for

on8a7fdfa

User selector

All users

All time

Commit History

Commits on Jun 18, 2024

• fix conflict

  am0o0

  committed
  8a7fdfa

  Copy full SHA for 8a7fdfa

Commits on May 29, 2024

• update id of the query file

  am0o0

  committed
  1f11246

  Copy full SHA for 1f11246

• rename secondary to remote :), complete the previous commit changes

  am0o0

  committed
  b9edcb7

  Copy full SHA for b9edcb7

• fix the qhelp of secondary server cmd injectino

  am0o0

  committed
  5299c4a

  Copy full SHA for 5299c4a

Commits on May 6, 2024

• continue to convert paramiko query to a more general query,

  Show description for 4df73f9
  

  am0o0

  authored and

  tausbn

  committed
  4df73f9

  Copy full SHA for 4df73f9

• convert paramiko query to SecondaryServerCmdInjection query, Add inline tests

  

  am0o0

  authored and

  tausbn

  committed
  5fea71e

  Copy full SHA for 5fea71e

Commits on Apr 24, 2024

• Add documentation

  joefarebrother

  committed
  daa31b5

  Copy full SHA for daa31b5

• Move headers injection query and concept from experimental to main

  joefarebrother

  committed
  6021d92

  Copy full SHA for 6021d92

Commits on Apr 22, 2024

• Python: Autoformat everything

  Show description for b484aee
  tausbn

  committed
  b484aee

  Copy full SHA for b484aee

• Python: Change all remaining occurrences of `StrConst`

  Show description for 1c68c98
  tausbn

  committed
  1c68c98

  Copy full SHA for 1c68c98

Commits on Mar 15, 2024

• use of a single var "op" of type Cmpop

  

  Sim4n6

  authored and

  yoff

  committed
  26a16b7

  Copy full SHA for 26a16b7

• Fix p tag in UnicodeDoS.qhelp

  

  Sim4n6

  authored and

  yoff

  committed
  a717bf1

  Copy full SHA for a717bf1

• Fix UnicodeDoS vulnerability in CWE-770 code

  

  Sim4n6

  authored and

  yoff

  committed
  af19a03

  Copy full SHA for af19a03

• Fix UnicodeDoS vulnerability in CWE-770

  

  Sim4n6

  authored and

  yoff

  committed
  085d803

  Copy full SHA for 085d803

• Update request parameter name in good_1() function

  

  Sim4n6

  authored and

  yoff

  committed
  31dc542

  Copy full SHA for 31dc542

• Refactor Unicode normalization code

  

  Sim4n6

  authored and

  yoff

  committed
  70ebc58

  Copy full SHA for 70ebc58

• Update python/ql/src/experimental/Security/CWE-770/UnicodeDoS.ql

  Show description for 658b88e
  

  Sim4n6

  and

  yoff

  committed
  658b88e

  Copy full SHA for 658b88e

• Add some comments and docs

  

  Sim4n6

  authored and

  yoff

  committed
  1f767b8

  Copy full SHA for 1f767b8

• Add UnicodeDoS sink for werkzeug secure_filename

  

  Sim4n6

  authored and

  yoff

  committed
  5cc9170

  Copy full SHA for 5cc9170

• Add Unicode DoS (CWE-770)

  

  Sim4n6

  authored and

  yoff

  committed
  3424650

  Copy full SHA for 3424650

Commits on Feb 14, 2024

• Fix QLDoc issues

  am0o0

  committed
  09d8a75

  Copy full SHA for 09d8a75

• Python: Change name/id to `Decompression Bomb`

  Show description for e5bd633
  RasmusWL

  committed
  e5bd633

  Copy full SHA for e5bd633

• Python: Delete duplicated file

  RasmusWL

  committed
  ba7dd38

  Copy full SHA for ba7dd38

• Merge branch 'main' into amammad-python-bombs

  RasmusWL

  committed
  9399258

  Copy full SHA for 9399258

Commits on Dec 14, 2023

• Python: Remove references to FlowStateString.

  aschackmull

  committed
  8ef4821

  Copy full SHA for 8ef4821

Commits on Dec 7, 2023

• added inline tests

  am0o0

  committed
  5795c72

  Copy full SHA for 5795c72

• Merge branch 'main' into amammad-python-bombs

  am0o0

  committed
  6ebdae3

  Copy full SHA for 6ebdae3

• fix some qldocs, change Sink extenstion model, deduct some not necessarily checks :)

  am0o0

  committed
  2d0067d

  Copy full SHA for 2d0067d

Commits on Oct 9, 2023

• clean up unused vars,fix tests

  am0o0

  committed
  4283bb7

  Copy full SHA for 4283bb7

• move library file to experimental lib directory

  am0o0

  committed
  9d86e79

  Copy full SHA for 9d86e79

• modularize

  am0o0

  committed
  1318afd

  Copy full SHA for 1318afd

• upgrade fastAPI remote sources

  am0o0

  committed
  3175db2

  Copy full SHA for 3175db2

Commits on Sep 7, 2023

• add sources to detect CVE completely

  am0o0

  committed
  6ee5865

  Copy full SHA for 6ee5865

• Python: prepare to promote NoSqlInjection

  Show description for 60dc1af
  yoff

  committed
  60dc1af

  Copy full SHA for 60dc1af

Commits on Sep 6, 2023

• add sources to detect CVE completely

  am0o0

  committed
  bcfc28a

  Copy full SHA for bcfc28a