Sift or Get off the PoC: Applying Information Retrieval to Vulnerability Research with SiftRank

Security research is fundamentally a problem of resource constraint and consequent prioritization. There is simply too much attack surface and too little time and energy to spend analyzing it all. The most effective security researchers are often those who are most skilled at intuitively deciding...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

[SECURITY] Fedora 43 Update: nanovna-saver-0.7.3-8.fc43

A multiplatform tool to save Touchstone files from the NanoVNA, sweep frequency spans in segments to gain more than 101 data points, and generally display and analyze the resulting data...

📄 Microsoft Windows 11 Search Path Privilege Escalation

Microsoft Windows 11 suffers from an untrusted search path local privilege escalation vulnerability. Proof of concept Metasploit module included. ============================================================================================================================================= | Title :...

PT-2025-49083

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a double-kfree issue within the s390/ctcm subsystem. The function mpc rcvd sweep reqmpcginfo conditionally frees memory pointed to by mpcginfo. Subsequently, a...

ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applications

AI agent-based systems are becoming increasingly integral to modern software architectures, enabling autonomous decision-making, dynamic task execution, and multimodal interactions through large language models LLMs. However, these systems introduce novel and evolving security challenges, includi...

PBFuzz: Agentic Directed Fuzzing for PoV Generation

Proof-of-Vulnerability PoV input generation is a critical task in software security and supports downstream applications such as path generation and validation. Generating a PoV input requires solving two sets of constraints: 1 reachability constraints for reaching vulnerable code locations, and ...

MAL-2025-192281 Malicious code in elf-stats-frostbitten-pantry-235 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af87e8804f9d49a6b71f2546c64657549faef299f6cf99e9dfc3bf7af21a905 The package elf-stats-frostbitten-pantry-235 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192278 Malicious code in elf-stats-aurora-toy-659 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d91ae0169f112f2142e3793ee5f5fea9aebc352c6969c276ba2e5d31bd03f2a The package elf-stats-aurora-toy-659 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-sleighing-mailbag-621 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bd43889e90656b7e076b57eae6373547a6c883fda60fd63069784433a41bab The package elf-stats-sleighing-mailbag-621 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-snowdusted-stockpile-595 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313c3813ac8880b0dc1f1a973c0125bf17d9f2c700ddc7a009cfc1efbdb54f4b The package elf-stats-snowdusted-stockpile-595 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192270 Malicious code in elf-stats-tinsel-candy-605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbef0d18c705f5e2d320ebbffd2ca291c82eeed7bb636c5a582d7388790185 The package elf-stats-tinsel-candy-605 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in unified11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da60b6c513002dadf0ea32c3293c0c1f0e73d8db20f85baf9b207fff1311569 The package unified11 was found to contain malicious code. Source: ghsa-malware 0234999818b5c6447b46c2551778c8daea15a41767afd1270af691c637d8ea9d Any...

MAL-2025-192246 Malicious code in remark-parse10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd5885ca66abe264124578aa99aaeb2907923a26681d5b64e8d6b72cb72696 The package remark-parse10 was found to contain malicious code. Source: ghsa-malware b0d37276c9efb7e85e07384bd19c0625e6672c70443710e145c260516f0ba2f4...

MAL-2025-192223 Malicious code in elf-stats-nutmeg-cocoa-967 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec53b5235707d735ff1bece95ce8c4e95266aca2f088ceb1460b2c686ca4616d The package elf-stats-nutmeg-cocoa-967 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192244 Malicious code in hast-util-to-mdast9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabf8dc58c17b065c6576e16228fa6dbe32f4944b01419821880c59edb28d012 The package hast-util-to-mdast9 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192203 Malicious code in elf-stats-cocoa-ribbon-476 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005ed1613dc4777b86a0449d32f014ea40f1ab9237ebd84bed9d955cdbaefd56 The package elf-stats-cocoa-ribbon-476 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-shimmering-lantern-668 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0bf489feb2d390c8580fca8ed4a6840dd7b673f7b427c7644e0004854dd8d3 The package elf-stats-shimmering-lantern-668 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-cosy-sleigh-356 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d68bf61b3458f8965a4a4fb7d30007c37aaddd4a98ef70d354064df191e587e The package elf-stats-cosy-sleigh-356 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191981 Malicious code in elf-stats-frosty-candy-393 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9995d6c66e999d598020c6fa5202b69c01b763a586129b2190e99153e479047 The package elf-stats-frosty-candy-393 was found to contain malicious code. Source: ossf-package-analysis...