CWE-585 空的同步代码块 Empty Synchronized Block 结构: Simple Abstraction: Variant 状态: Draft 被利用可能性: unkown 基本...
Category-986: SFP Secondary Cluster: Missing Lock
Category-986: SFP Secondary Cluster: Missing Lock ID: 986 Status: Incomplete Summary This category i...
Category-987: SFP Secondary Cluster: Multiple Locks/Unlocks
Category-987: SFP Secondary Cluster: Multiple Locks/Unlocks ID: 987 Status: Incomplete Summary This ...
Category-988: SFP Secondary Cluster: Race Condition Window
Category-988: SFP Secondary Cluster: Race Condition Window ID: 988 Status: Incomplete Summary This c...
CWE-572 调用线程的run()方法而非start()方法
CWE-572 调用线程的run()方法而非start()方法 Call to Thread run() instead of start() 结构: Simple Abstraction: Vari...
CWE-574 EJB不安全实践:使用同步原语
CWE-574 EJB不安全实践:使用同步原语 EJB Bad Practices: Use of Synchronization Primitives 结构: Simple Abstraction:...
CWE-576 EJB不安全实践:使用Java I/O
CWE-576 EJB不安全实践:使用Java I/O EJB Bad Practices: Use of Java I/O 结构: Simple Abstraction: Variant 状态: D...
CWE-578 EJB不安全实践:使用类加载器
CWE-578 EJB不安全实践:使用类加载器 EJB Bad Practices: Use of Class Loader 结构: Simple Abstraction: Variant 状态: D...
Category-983: SFP Secondary Cluster: Faulty Resource Use
Category-983: SFP Secondary Cluster: Faulty Resource Use ID: 983 Status: Incomplete Summary This cat...
Category-984: SFP Secondary Cluster: Life Cycle
Category-984: SFP Secondary Cluster: Life Cycle ID: 984 Status: Incomplete Summary This category ide...
Category-985: SFP Secondary Cluster: Unrestricted Consumption
Category-985: SFP Secondary Cluster: Unrestricted Consumption ID: 985 Status: Incomplete Summary Thi...
代码审计 | 命令注入和代码注入
0x01 命令注入在开发过程中,开发人员可能需要对系统文件进行移动、删除或者执行一些系统命令,这时如果执行的命令用户可控,就会导致命令执行漏洞。1、示例当命令可控时,就可能会导致命令注入,例如以下代码...
26043