CyRC

Cybersecurity Research Center (CyRC) leverages Black Duck’s expertise, technology, and resources to conduct high-quality primary and secondary software security research, and publishes its findings for the benefit of the broader security, developer, and DevSecOps communities.

CyRC

Cybersecurity Research Center (CyRC) leverages Black Duck’s expertise, technology, and resources to conduct high-quality primary and secondary software security research, and publishes its findings for the benefit of the broader security, developer, and DevSecOps communities.

63 Stories 18 Writers
CyRC Vulnerability Analysis: CVE-2022-1271 in gzip, but it’s not as bad as it sounds
CyRC Vulnerability Analysis: CVE-2022-1271 in gzip, but it’s not as bad as it sounds
Jonathan Knudsen
Apr 19, 2022 | 2 min read
CyRC Vulnerability Advisory: Stored XSS in Directus
CyRC Vulnerability Advisory: Stored XSS in Directus
David Johansson
Apr 11, 2022 | 2 min read
CyRC Vulnerability Analysis: Two distinct Spring vulnerabilities discovered – Spring4Shell and CVE-2022-22963
CyRC Vulnerability Analysis: Two distinct Spring vulnerabilities discovered – Spring4Shell and CVE-2022-22963
Jonathan Knudsen
Mar 29, 2022 | 2 min read
CyRC Vulnerability Analysis: Local privilege escalation vulnerability discovered
CyRC Vulnerability Analysis: Local privilege escalation vulnerability discovered
Black Duck Cybersecurity Research Center
Jan 26, 2022 | 3 min read
CyRC Vulnerability Analysis: Remote code execution zero-day exploit in Java logging library (log4j2)
CyRC Vulnerability Analysis: Remote code execution zero-day exploit in Java logging library (log4j2)
Dec 10, 2021 | 8 min read