🎯 TOCTOU

The items that name it 8

• TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
  articleas classification.key entities2026-10-30
• Tailworm – Tailscale Vulnerabilities
  writeupas classification.key entities2026-10-25
• Zero to calc in six days: inside XBOW's Chrome full chain
  writeupas classification.key entities2026-10-13
• Putting models to the secure coding test: Plan vs default mode
  articleas techniques2026-08-19It is written here as Time-of-check to time-of-use (TOCTOU) race condition.

  Concurrent registrations could escalate privileges during initial admin provisioning in GPT 5.5 plan mode

• AI Security Briefing
  advisoryas techniques2026-07-13It is written here as TOCTOU (Time-of-check to time-of-use).

  validate_url_for_ssrf resolves and validates the header hostname once at middleware time and discards the resolved IP; the fetcher later re-resolves the raw hostname at connect time

• claude-code-security-review
  repoas techniques2026-05-10It is written here as Time-of-check-time-of-use (TOCTOU) issues.

  Business logic flaw category detected by the tool

• PyPI Access Control Vulns Patched
  articleas techniques2026-05-06It is written here as Time-of-check to time-of-use (TOCTOU) race condition.

  jti protection split across an EXISTS check before macaroon creation and a later SET NX after creation, with the SET NX return value unchecked, allowing two concurrent requests with the same jti to both mint valid upload tokens

• DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
  advisoryas classification.key entities