libpo32

libpo32 A small C99 library for Teenage Engineering PO-32 acoustic data transfers and drum synthesis. libpo32 reimplements the PO-32 Tonic transfer stack and a compatible drum voice model. It is not a full PO-32 firmware or UI emulator; it covers the packet format, acoustic modem, frame decoder,...

sqlancer

SQLancer is a tool to automatically test Database Management Systems DBMSs in order to find bugs in their implementation. That is, it finds bugs in the code of the DBMS implementation, rather than in queries written by the user. SQLancer has found hundreds of bugs in mature and widely-known DBMSs...

yamaha-smaf-player

Yamaha SMAF Player C++ by Akustikrausch Andreas Wendorf a small, dependency-free player for Yamaha SMAF ringtones .mmf in c++. you hand it one of those files that made your samsung, sharp, or panasonic go deedle-deedle-dee in 2004, and it hands you clean stereo audio. no phone, no firmware, no...

nCPU

A complete computer in which every layer — arithmetic, OS, compiler, display — is either a trained neural network or runs entirely on GPU. The model doesn't run on the computer. The model is the computer. nCPU is one repository pursuing one thesis from five directions: a computer can be built out...

redthread

RedThread Find the exploit. Judge it. Draft the fix. Prove what changed. RedThread is a CLI-first framework for testing LLM systems, validating failures, and turning confirmed vulnerabilities into evidence-backed defense candidates. It is built for teams who need more than a one-off jailbreak dem...

awesome-mba

This repo includes links relevant to Mixed Boolean-Arithmetic MBA obfuscation. PRs are welcome. Note that some resources here are not strictly related to MBA, though all are relevant in some way. Papers Information Hiding in Software with Mixed Boolean-Arithmetic Transforms Obfuscation with Mixed...

xyntia

This repository does not have a README...

qlcoder

QLCoder Agentic Framework for Synthesizing CodeQL Queries Table of Contents Overview Installation Docker Recommended Native Linux Usage Quick Start Development Tooling Examples Paper Environment Contributions Team Citation Affiliated Projects Overview QLCoder is a framework for using LLMs to...

qsynth-artifacts

QSynth Synthesis Artefacts Datasets These artifacts provide the following four datasets: syntia : 500 functions obfuscated with EncodeArithmetic and EncodeData customEA : 500 functions obfuscated with EncodeArithmetic customVREA : 500 functions obfuscated with Virtualize and EncodeArithmetic...

EUVD-2026-106994

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CFDIB synthesis because winprreadpngfrombuffer allocates a bit-packed buffer for PNGs with bit depth below 8, while winprbitmapwritebuffer copies rows assuming one byte per pixel. A malicious RDP server can...

CVE-2026-114043

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CFDIB synthesis because winprreadpngfrombuffer allocates a bit-packed buffer for PNGs with bit depth below 8, while winprbitmapwritebuffer copies rows assuming one byte per pixel. A malicious RDP server can...

Linux Distros Unpatched Vulnerability : CVE-2026-114043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CFDIB synthesis because winprreadpngfrombuffer allocates a bit-packed...

Agent World Model in the Wild: Computer-Use Agent Environment Synthesis

Agent learning is shifting from learning from human data toward learning through interaction with the world. However, scaling such learning directly in real-world computer systems is challenging and can introduce substantial security risks. We therefore propose Agent World Model in the Wild...

AMENDER-pipeline

AMENDER: Automated Metasploit Module ENgineering and Diagnosti...

Astra Linux – Vulnerability in Thunderbird

The parent process does not properly check whether the Speech Synthesis feature is enabled when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: unbound (UTSA-2026-130095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130095 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation...

msynth

msynth Autore: Tim Blazytko e Moritz Schloegel msynth è un framework di deoffuscamento del codice per semplificare espressioni Mixed Boolean-Arithmetic MBA. Dato un oracolo di semplificazione precalcolato, attraversa un'espressione complessa rappresentata come albero sintattico astratto AST e ten...

Malicious code in node-env-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3e0e1b364a3d74534d6ce1eca74778a85e508cf10952f84f36bf1badd8a581 The package is advertised as an environment configuration resolver but its postinstall script installs a hidden persistent agent into user-level...

PoCHarness

!licensehttps://img.shields.io/badge/license-Apache--2.0-gree...

Rocky Linux 9 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (crlsa-2026_71487)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202671487 advisory. unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis CVE-2026-82717 unbound: Unbound: Heap buffer overflow via malicious DNSSEC respon...