-
Updated
Nov 16, 2020 - Python
cwe
Here are 20 public repositories matching this topic...
-
Updated
Feb 10, 2018 - Python
I noticed you have a plugin for Ghidra, but it is not the only one FOSS tool available.
Radare2 is a highly-portable cross-platform reverse engineering framework and a toolkit without dependencies. It has support for analyzing binaries, disassembling code, debugging programs, attaching to remote GDB/LLDB, WinDbg servers, rich plugin system (see r2pm), an
-
Updated
Nov 2, 2020 - JavaScript
-
Updated
Oct 3, 2019 - Python
-
Updated
Nov 11, 2020 - JavaScript
Original issue from previous repo: lirantal/cwe-sdk#2
Is your feature request related to a problem? Please describe.
Sometimes CWE is a member of other enumerations. It will be helpful to obtain the related categories in order to get the other weakness descriptions.
Describe the solution you'd like
For example, we run the command
`> cwe-sdk member
-
Updated
Oct 21, 2020 - JavaScript
-
Updated
Nov 11, 2020 - Python
-
Updated
Nov 10, 2020
-
Updated
Nov 16, 2020 - C#
-
Updated
Dec 11, 2018 - JavaScript
-
Updated
May 13, 2018 - R
Improve this page
Add a description, image, and links to the cwe topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the cwe topic, visit your repo's landing page and select "manage topics."


Description
BeanUtils is a library that is doing automatic mapping to Java object.
It can cause arm when the attack controls part of the list of properties being sets. BeanUtils does not blacklist properties like class, classloader or other objects that are likely to load arbitrary classes and possibly run code.
Code