When Models Know but Can't Linearly Say: Relational Encoding Limits Linear Vulnerability Classification in Code LLMs

Large language models can detect vulnerable code, yet the form of vulnerability encoding in their representations remains unclear. We analyze 8 code models spanning 6.7B-15B parameters on C programs using three datasets DELTASECOMMITS, SVEN, and PRECISE-BUGS, comparing two diagnostic tasks on the...

Linux Distros Unpatched Vulnerability : CVE-2026-110334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plack project reports: SECURITY BUG FIXES BUG FIXES CVE-2026-110334 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-110335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plack project reports: SECURITY BUG FIXES BUG FIXES CVE-2026-110335 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-98448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: release orphanage dir inode if chown fails LOLLM points out that we leak the igrab'd reference to the orphanage directory inode if chowning it fails. Fix...

Linux Distros Unpatched Vulnerability : CVE-2026-110333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plack project reports: SECURITY BUG FIXES BUG FIXES CVE-2026-110333 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2026-108780: Undefined Security Weakness

Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

super-xray

Super Xray If this project has helped you, you can give it a Star to support the author Introduction xray is an excellent vulnerability scanning tool, but currently only has a command-line version, started via the config.yaml configuration file. In many cases it is not easy to get started with, a...

CLSA-2026-1792367380 TuxCare security update for @next/swc-linux-arm64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-arm64-gnu to address 1 CVE. Fixed in 15.5.24-tuxcare.1...

CVE-2024-6387-Vulnerability-Checker

CVE-2024-6387 Vulnerability Checker Overview This Python script is designed to check SSH servers for the CVE-2024-6387 vulnerability, specifically targeting the recently discovered regreSSHion , which is associated with specific versions of OpenSSH. The tool supports multiple IP addresses, URLs,...

CVE-2020-2883

CVE-2020-2883 Compatible with versions 12.2.1.3 and 12.2.1.4...

EUVD-2025-26374

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obtain the JWT JSON Web Token...

redfall

Redfall Autonomous vulnerability discovery and verified rep...

vFeed

CHECK THE NEW LIBRARY https://github.com/vfeedio/pyvfeed vFeed The Correlated Vulnerability and Threat Intelligence Database Wrapper vFeed Python Wrapper / Database is a CVE, CWE, and OVAL Compatible naming scheme concept that provides extra structured detailed third-party references and technica...

route-sixty-sink

✏️ Contributors Dillon Franke @dillonfranke Michael Maturi @a-marionette 📝 Blog https://www.mandiant.com/resources/route-sixty-sink-launch ⚓ Route Sixty-Sink Route Sixty-Sink is an open source tool that enables defenders and security researchers alike to quickly identify vulnerabilities in any .NE...

CVE-2026-98751

In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should stil...

CVE-2026-98695

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix ioctl hangup race The tty ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Serialise the callbacks using the tty port mutex and add the missing...

trommel

TROMMEL TROMMEL sifts through embedded device files to identify potential vulnerable indicators. TROMMEL identifies the following indicators related to: Secure Shell SSH key files Secure Socket Layer SSL key files Internet Protocol IP addresses Uniform Resource Locator URL email addresses shell...

log4j-remediation-tools

log4j-remediation-tools Tools for finding and reproducing the CVE-2021-44228 log4j2 vulnerability Tools find-vulnerabilities: determine heuristically whether a running JVM is vulnerable confirm-vulnerabilities: determine with 100% accuracy whether a running JVM is vulnerable Usage Both of these...

cve-2014-2734

This repository does not have a README...

lnkbomb

Lnkbomb Lnkbomb is used for uploading malicious shortcut files to insecure file shares. The vulnerability exists due to Windows looking for an icon file to associate with the shortcut file. This icon file can be directed to a penetration tester's machine running Responder or smbserver to gather...