ynvb

Crash in IDA 6.7 64bit

3

When loading the plugin into my IDA6.7 64bit, IDA crashes on load and shows the default crash dump messagebox. . This does not seem to happen on the 32bit version.

Unhandled IDA Crashes

1

IDA sometimes crashes when running DIE. These crashes are inconsistent and seems to be hard to replicate.

API5:2023 Broken Function Level Authorization - Detection Comment

2

The initial table (middle raw) states that "Detection relies on proper logging and monitoring.". Without going into specific vendor solutions and detections (which I do not believe should be encouraged...

API10:2023 Unsafe Consumption of APIs - Conflicting vulnerability indicators

2

Under the "Is the API Vulnerable?" section, two examples appear that IMO is out-of-scope for this category: 1. Interacts with other APIs over an unencrypted channel This conflicts with API7:2023...

Scenario #1 - This category shows a JNDI injection issue. I don't believe a JNDI injection is a good example of a "security misconfiguration" issue. sure, sometimes there might be...