18286 matches found
nano-analyzer
Nano-analyzer A minimal LLM-powered zero-day vulnerability scanner byAISLE. Research prototype for demonstration purposes. This is a simple, single-file harness that is able to detect real zero-day vulnerabilities. Note that it is a prototype, biased towards C/C++ memory safety bugs, and will...
mlkem-native
mlkem-native mlkem-native is a secure, fast, and portable C90^C90 implementation of ML-KEM^FIPS203. It is a fork of the ML-KEM reference implementation^REF. All C code in mlkem/src/ and mlkem/src/fips202/, except for the backends for platforms other than AArch64 and x8664 and the debug code, is...
clr
CLR C hecker of L ifetimes and other R efinement types for Zig Video: https://www.youtube.com/watch?v=mf0WzTOe-40 Sponsorship: https://buymeacoffee.com/dnautics discuss on hn: https://news.ycombinator.com/item?id=42923829 discuss on lobste.rs: https://lobste.rs/s/9sitsj/clrcheckerforlifetimesothe...
CVE-2026-52790
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a library-level memory safety issue that is reachable from an unmodified official sample server apps/server-basic/main.c over BACnet/IP resulting in a...
CVE-2026-52790
The BACnet Stack C library for embedded systems contains a library-level memory safety issue in versions prior to 1.4.5, 1.5.1, and 1.6.0 . The vulnerability, located in writable Device string properties, is reachable via an unmodified official sample server (apps/server-basic/main.c) over BACnet...
EUVD-2026-125535
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a library-level memory safety issue that is reachable from an unmodified official sample server apps/server-basic/main.c over BACnet/IP resulting in a...
CVE-2026-52790 BACnet Stack: bacnet_device.c stack-use-after-return in writable Device string properties
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a library-level memory safety issue that is reachable from an unmodified official sample server apps/server-basic/main.c over BACnet/IP resulting in a...
CVE-2026-39113
CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLAR Extension Executive Summary CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension. In an application that has loaded the extension, an attacker who can invoke sqlaruncompress with a controlled compressed blob...
GHSA-XCVG-W56Q-R89M Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size
============================================================================ ANT-2026-CS7N494P high CWE-787 memory-safety Heap buffer overflow saving TIFF with libtiff when tags override image size Location: src/libImaging/TiffDecode.c:1035 in ImagingLibTiffEncode Commit:...
Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size
============================================================================ ANT-2026-CS7N494P high CWE-787 memory-safety Heap buffer overflow saving TIFF with libtiff when tags override image size Location: src/libImaging/TiffDecode.c:1035 in ImagingLibTiffEncode Commit:...
CVE-2015-8710
Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...
kernel-c-to-rust-spike
Kernel C-to-Rust hardening spike: UVC descriptor parser Can a security-critical Linux kernel C parser be hardened by rewriting it in Rust, with the rewrite shown equivalent to the original and then formally verified? This spike runs the full loop on one target: the UVC video descriptor parser...
KLA91416 Multiple vulnerabilities in Apache HTTP Server
Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability can be exploited to cau...
PT-2026-145380
The https://t.co/RlanUHHlFH project, backed by the https://t.co/RlanUHHlFH Foundation @XOrgFoundation, published a security advisory on Tuesday for eight vulnerabilities in the https://t.co/RlanUHHlFH X server and Xwayland, the display code still used by many Linux and Unix desktops, and released...
PT-2026-145377
The https://t.co/RlanUHHlFH project, backed by the https://t.co/RlanUHHlFH Foundation @XOrgFoundation, published a security advisory on Tuesday for eight vulnerabilities in the https://t.co/RlanUHHlFH X server and Xwayland, the display code still used by many Linux and Unix desktops, and released...
PT-2026-145373
The https://t.co/RlanUHHlFH project, backed by the https://t.co/RlanUHHlFH Foundation @XOrgFoundation, published a security advisory on Tuesday for eight vulnerabilities in the https://t.co/RlanUHHlFH X server and Xwayland, the display code still used by many Linux and Unix desktops, and released...
PT-2026-145374
The https://t.co/RlanUHHlFH project, backed by the https://t.co/RlanUHHlFH Foundation @XOrgFoundation, published a security advisory on Tuesday for eight vulnerabilities in the https://t.co/RlanUHHlFH X server and Xwayland, the display code still used by many Linux and Unix desktops, and released...
PT-2026-145375
The https://t.co/RlanUHHlFH project, backed by the https://t.co/RlanUHHlFH Foundation @XOrgFoundation, published a security advisory on Tuesday for eight vulnerabilities in the https://t.co/RlanUHHlFH X server and Xwayland, the display code still used by many Linux and Unix desktops, and released...
PT-2026-145376
The https://t.co/RlanUHHlFH project, backed by the https://t.co/RlanUHHlFH Foundation @XOrgFoundation, published a security advisory on Tuesday for eight vulnerabilities in the https://t.co/RlanUHHlFH X server and Xwayland, the display code still used by many Linux and Unix desktops, and released...
FORGE Lab uses agentic tools to identify memory safety issues in Rust
In this article 1. How we found and validated the bugs 2. Pattern 1: Trusting code not to panic 3. Pattern 2: Trusting user-provided implementations to be correct 4. Pattern 3: Trusting the underlying system 5. Why Rust still matters and advancing vulnerability discovery with AI 6. Rust's high ba...