SiMBA

SiMBA SiMBA is a tool for the simplification of linear mixed Boolean-arithmetic expressions MBAs. Like MBA-Blast and MBA-Solver, it uses a fully algebraic approach based on the idea that a linear MBA is fully determined by its values on the set of zeros and ones, but leveraging the new insights...

covirt

covirt An x86-64 code virtualizer for VM based obfuscation. Features Stack-based virtual machine architecture MBA, self-modifying code obfuscation Support for both PE and ELF binaries Code markers to define protected regions PE support only tested on binaries compiled via MinGW-w64 Getting starte...

GAMBA

GAMBA GAMBA is a tool for the simplification of mixed Boolean-arithmetic expressions MBAs. GAMBA is short for General Advanced Mixed Boolean Arithmetic simplifier. It uses the linear algebraic simplifier SiMBA to iteratively simplify linear subexpressions of a potentially nonlinear input MBA...

awesome-mba

This repo includes links relevant to Mixed Boolean-Arithmetic MBA obfuscation. PRs are welcome. Note that some resources here are not strictly related to MBA, though all are relevant in some way. Papers Information Hiding in Software with Mixed Boolean-Arithmetic Transforms Obfuscation with Mixed...

CVE-2026-58734

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79013

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92364

In google mba recv msg of google mba poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92306

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A memory corruption issue exists in the gmc mb msg handler function within gmc mba.c caused by a confused deputy. A confused deputy is a security issue where a...

PUB-A-508699275

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from an obfuscation issue in the gmcddrhandlembamrreq function within the gmcmbaddr.c file, which may lead to an increase in local privileges...

Researcher Spotlight: How working for Talos started out as an ‘accident’ for Ashlee Benge before coming a second career

Talos lead of data strategy and insights has a lot of weight on her shoulders currently, but its nothing shes not used to Most people who first meet Ashlee Benge do a double take when they hear about her past experience. The average security practitioner at a networking event may share that they...

mba-international.hec.uliege.be Cross Site Scripting vulnerability OBB-2154399

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

mba-magistratura.com Cross Site Scripting vulnerability OBB-1251577

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Defending Credentials From Automated Attack Tools

By Danny Wasserman The folks on the Akamai Professional Services team are the people who help implement, configure, and tune the cloud security products that protect our customers' web applications from the daily onslaught of bots blasting login attempts against their websites, mobile apps, and...

mba-studium.net XSS vulnerability

Open Bug Bounty ID: OBB-676439 Description| Value ---|--- Affected Website:| mba-studium.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mba-master.de XSS vulnerability

Open Bug Bounty ID: OBB-671043 Description| Value ---|--- Affected Website:| mba-master.de Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mba-exchange.com XSS vulnerability

Open Bug Bounty ID: OBB-668189 Description| Value ---|--- Affected Website:| mba-exchange.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mba-lounge.de XSS vulnerability

Open Bug Bounty ID: OBB-612074 Description| Value ---|--- Affected Website:| mba-lounge.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

california-mba-edu.org XSS vulnerability

Open Bug Bounty ID: OBB-587369 Description| Value ---|--- Affected Website:| california-mba-edu.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mba-exchange.com XSS vulnerability

Open Bug Bounty ID: OBB-551003 Description| Value ---|--- Affected Website:| mba-exchange.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...