856 matches found
restler-fuzzer
RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...
httpx
Features • Installation • Usage • Documentation • Notes • Join Discord httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. It is designed to maintain result reliability with an increased number of threads. Features Simple and modular...
LLMMap
LLMMap LLMMap is an automated prompt injection testing framework for LLM-integrated applications. It discovers injection points in HTTP requests, generates targeted attack prompts using a dual-LLM architecture, fires them at the target, and confirms findings with statistical reliability testing...
pybatfish
Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...
SharpWSUS
SharpWSUS SharpWSUS is a CSharp tool for lateral movement through WSUS. There is a corresponding blog https://labs.nettitude.com/blog/introducing-sharpwsus/ which has more detailed information about the tooling, use case and detection. Credits Massive credit to the below resources that really did...
ph0neutria
ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...
ps5-umtxdbg
NOTES The bug was found in early december 2020, not by me, but a genius who looked 15mins at fbsd and immediately spotted it 🙇♂️. This c++ impl was made when experimenting with increasing exploit reliability after ps5 kernel added some heap randomization features. setup vm get vm image wget...
ProxyListReliabilityCheck
ProxyListReliabilityCheck Perl script to test the reliability of a list of open web proxies. The script takes in a text file list of IPAddress:Port of open web proxies to test 1 per line. It then attempts to crawl to the following URL through each target proxy:...
locust-cloud (>=0.1.4, <=1.7.0), reliability-chatbot (>=0.16.0, <=0.31.0) +2 more potentially affected by CVE-2026-112909 via filelock (3.15.1)
filelock PYPI version 3.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - locust-cloud =0.1.4, =0.16.0, =0.9.3.2, =0.8.5, =0.9.3.2 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: bpf: Detect IP == ksym.end as part of BPF program Now that bpfthrow kfunc is the first such call instruction that has noreturn semantics within the verifier, this also triggers dead code elimination in unprecedented ways. For...
Microsoft Teams help & learning
Microsoft Teams help & learning Quick access Meetings Chat Notifications & settings Teams & channels Calls & devices Files Troubleshoot IT Pro & admin Get more done with Copilot in Teams Chat with Copilot in Teams Start a conversation with Copilot in Teams about files, chats, meetings, and more...
JASPER: Special Session on Joint Reliability and Security Assessment of SPlit Computing for Edge Robustness
Split Computing SC enables efficient deployment of Deep Neural Networks DNNs by partitioning inference between edge devices and cloud servers. However, intermediate feature representations are simultaneously exposed to hardware faults and adversarial attacks, which are traditionally evaluated...
Lessons from Microsoft Patch KB5002907: Two Layers of Patch Control in Qualys TruRisk Eliminate
How reliability scoring keeps risky patches out of zero-touch jobs, and how one blocking rule stops a paused update across your environment. Executive Summary Microsoft has paused the rollout of KB5002907, an optional Microsoft 365 Apps update that left some Office 2016 and Office 2019...
On the Security and Privacy of LLMs in Mobility
The mobility sector is undergoing a paradigm shift driven by advances in Generative Artificial Intelligence. With a global market valued at approximately 2.9 trillion dollars annually, considering only cars, the integration of these technologies has the potential to impact more than 1.5 billion...
Before You Patch. Why Patch Reliability Matters for Confident Deployment
Executive Summary Microsoft’s September 2026 security updates,KB5124008 and KB5124012 , have been linked to USB audio failures on some Windows systems, highlighting the operational risk that can accompany security patching. Qualys TruRisk Eliminate classified both updates as Low Reliability ,...
September 8, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB5126044)
September 8, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 KB5126044 Applies To .NET Note Applies to: Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2 Important The...
Benchmark Scores Are Pipeline-Dependent: A Reliability Audit of Cybersecurity LLM Benchmarks
Large language model LLM benchmarks are often treated as fixed datasets with stable scores, yet their outcomes depend on configurable evaluation pipelines. We audit eight cybersecurity benchmarks across 10 proprietary, open-weight, and cybersecurity-specialized LLMs. By modeling benchmarks as...
PT-2026-86657
Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.6.0 through 2.6.22 OpenVPN versions 2.7.0 through 2.7.6 Description Remote unauthenticated attackers can cause a denial of service by sending crafted inputs that trigger a timeout integer overflow during the retransmission o...
How Reliable Are NVD CWE Labels? A Large-Scale Semantic Audit with Seclometry
CWE labels in the National Vulnerability Database NVD are widely treated as ground truth for vulnerability search, scanner evaluation, benchmark construction, learning-based security tools, and vulnerability prioritization. Yet their reliability has not been systematically measured at scale,...
