srikanth-lingala__zip4j_CVE-2018-1002202_1-3-2

zip4j This repository contains decompiled source code for the zip4j library versions 1.3.2 vulnerable and 1.3.3 fixed for CVE-2018-1002202, for the CWE-Bench-Java dataset. The original zip4j repository on Github doesn't include code from these versions. Versions Version 1.3.2 Vulnerable Tag : 1.3...

CWE-Bench: Refocusing Agentic Security from Exploitation to Defense

Cybersecurity evaluations of AI agents have focused largely on offense, yet a working exploit does not show that an agent can make software safe. An attacker needs to exploit only one vulnerability; a defender must find and fix all of them. We introduce CWE-bench, a private benchmark of 120...

Memoir: Learning, Verifying, and Evolving False-Positive Memories for Static Application Security Testing Tools

Static Application Security Testing SAST tools have become indispensable in modern secure software devel- opment. However, these tools often generate false-positive FP alerts, imposing substantial manual inspection costs and reducing the trust from developers. Existing FP reduction methods still...