Posts in:

Security

PII data leaks: Identifying personal information in logs with QL

In this video, you’ll learn how to use Semmle QL to find sensitive or personally identifying information (PII) that gets written to log files.

September 16, 2019

Quest for an Exploit using QL

Semmle security researcher Kevin Backhouse explains how he used QL to find an exploitation path for a bug that he had discovered in Apple's ICMP packet-handling code.

September 13, 2019

Finding Insecure Deserialization in Java

Our security research team discovered insecure deserialization in Java, specifically in an Apache Struts vulnerability. In this tutorial, learn how you can find java deserialization vulnerabilities using Semmle QL.

September 12, 2019

Using QL snapshots for analysis of large open source projects

September 12, 2019

Python Security: How to find and fix issues with QL

September 10, 2019

In-memory data grid applications: Finding common Java deserialization vulnerabilities with QL

September 05, 2019

Black Hat 2019 Recap: CTF challenge, U-Boot and more

August 22, 2019

VLC vulnerabilities discovered by the Semmle security research team

August 19, 2019

U-Boot RCE Vulnerabilities Affecting IoT Devices

U-Boot NFS RCE Vulnerabilities (CVE-2019-14192)

Semmle’s security research team discovers 13 U-Boot RCE vulnerabilities in its bootloader, which is commonly used by IoT, Kindle, and ARM ChromeOS devices.

Insecure Deserialization: Finding Java Vulnerabilities with QL

Deserialization of untrusted data can lead to vulnerabilities that allow an attacker to execute arbitrary code. We can use QL, the query language of LGTM, to find such deserialization vulnerabilities.

Github Security Features, Bluekeep, Nginx, and Security News - Semmle on Security

Open Security: The path to securing Open Source Software

Threat Hunting At Microsoft: Using Semmle QL To Eliminate Bugs

Semmle appoints its first CSO to build out world-class security research team and lead product security

Denial of Service (DoS) Vulnerability in Facebook Fizz

Facebook Fizz integer overflow vulnerability (CVE-2019-3560)

BSides San Francisco wrapup

Data flow analysis and path exploration in LGTM

February 28, 2019

Open source software security: How open results on LGTM can help

February 21, 2019

Introduction to variant analysis with QL and LGTM (Part 1)

February 19, 2019

Exploiting CVE-2018-19134: Ghostscript RCE through type confusion

February 05, 2019

Code review process: Why reviewer hierarchy can be harmful

January 29, 2019

Ghostscript type confusion: Using variant analysis to find vulnerabilities

January 22, 2019

CVE-2018-19475: Ghostscript shell command execution in SAFER mode

January 14, 2019

Apple XNU exploits: ICMP proof of concept

November 24, 2018

Ghostscript Vulnerabilities in Postscript & PDF Processings

November 21, 2018

OGNL Apache Struts exploit: Weaponizing a sandbox bypass (CVE-2018-11776)

November 21, 2018

Apple XNU Vulnerabilities Affecting Macs, iPhones, and iPads

October 30, 2018

Kernel crash caused by out-of-bounds write in Apple's ICMP packet-handling code (CVE-2018-4407)

October 30, 2018

CVE-2018-4259: MacOS NFS vulnerabilties lead to kernel RCE

October 30, 2018

Apache Struts 2: Remote Code Execution Vulnerability

October 04, 2018

Apache Struts double evaluation RCE lottery

October 04, 2018

OGNL injection in Apache Struts: Discovering exploits with taint tracking

September 24, 2018

Apache Struts Vulnerability - CVE-2018-11776

August 22, 2018

CVE-2018-11776: How to find 5 RCEs in Apache Struts with Semmle QL

August 22, 2018

Librelp buffer overflow fix (cve-2018-1000140) - a collaboration between Adiscon and Semmle

CVE-2018-4249 & CVE-2017-13904: Remote code execution in Apple's packet mangler

Apple NFS Diskless Boot: Negative integer overflow vulnerabilities (CVE-2018-4136 & CVE-2018-4160)

Etherpad reflected file download: Vulnerability hunting with QL (CVE-2018-6835)

CVE-2017-8046 exploit: Remote code execution affecting Pivotal Spring projects

Spring Data REST exploit (CVE-2017-8046): Finding a RCE vulnerability with QL

Android deserialization vulnerabilities: A brief history

February 02, 2018

Stack buffer overflow in Qualcomm MSM 4.4 - Finding bugs with QL

January 24, 2018

Castor and Hessian java deserialization vulnerabilities

January 17, 2018

XXE attack example using jBoss vulnerability (jBPM) CVE-2017-7545

December 19, 2017

Apple's XNU Kernel: Finding a memory exposure vulnerability with QL (CVE-2017-13782)

November 01, 2017

Restlet XXE vulnerability (CVE-2017-14949)

October 17, 2017

Swagger YAML parser vulnerability (CVE-2017-1000207 and CVE-2017-1000208)'

October 11, 2017

Restlet XML External Entity Expansion Vulnerability (CVE-2017-14868)

October 02, 2017

Spring AMQP Exploit (CVE-2017-8045): Remote Code Execution Vulnerability

September 20, 2017

Apache Struts Vulnerability (CVE-2017-9805) Found Using LGTM.com

September 05, 2017

CVE-2017-9805: How QL found a remote code execution vulnerability in Apache Struts

September 05, 2017

Browse all tags