Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

trailofbits — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting trailofbits. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by trailofbits:ficklinguthenticoderfc3161-client
CVE IDTitleCVSSSeverityPublished
CVE-2026-33753 Improper Certificate Validation in rfc3161-client — rfc3161-clientCWE-295 6.2 Medium2026-04-08
CVE-2026-22612 Fickling vulnerable to detection bypass due to "builtins" blindness — ficklingCWE-502 9.1 -2026-01-10
CVE-2026-22609 Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist — ficklingCWE-184 9.8 -2026-01-10
CVE-2026-22608 Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection — ficklingCWE-184 9.8 -2026-01-10
CVE-2026-22607 Fickling Blocklist Bypass: cProfile.run() — ficklingCWE-184 9.8 -2026-01-10
CVE-2026-22606 Fickling has a bypass via runpy.run_path() and runpy.run_module() — ficklingCWE-184 9.8 -2026-01-10
CVE-2025-67748 Fickling has Code Injection vulnerability via pty.spawn() — ficklingCWE-184 9.1AICriticalAI2025-12-16
CVE-2025-67747 Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list — ficklingCWE-184 8.4AIHighAI2025-12-16
CVE-2025-52556 rfc3161-client has insufficient verification for timestamp response signatures — rfc3161-clientCWE-347 7.5AIHighAI2025-06-21
CVE-2023-39969 uthenticode signature validation bypass vulnerability — uthenticodeCWE-347 9.1 Critical2023-08-09
CVE-2023-40012 uthenticode EKU validation bypass — uthenticodeCWE-325 5.9 Medium2023-08-09

This page lists every published CVE security advisory associated with trailofbits. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.