100 matches found
lava
LAVA: बड़े पैमाने पर स्वचालित भेद्यता जोड़ बग-खोज उपकरणों का मूल्यांकन और सुधार वर्तमान में ग्राउंड ट्रुथ कॉर्पोरा यानी, ऐसा सॉफ़्टवेयर जिसमें ट्रिगर करने वाले इनपुट के साथ ज्ञात बग हों की कमी के कारण कठिन है। LAVA सॉफ़्टवेयर में स्वचालित रूप से बग इंजेक्ट करके इस समस्या को हल करने का प्रयास करता...
CodePoisonRAG: Knowledge Poisoning Attacks on Retrieval-Augmented Code Generation
Retrieval-Augmented Code Generation RACG improves LLM-based software development by retrieving external code artifacts, documentation, and patches, and incorporating them into the generation context. This reliance on external knowledge introduces a critical trust boundary: poisoned artifacts can...
Automated Vulnerability Injection in Smart Contracts Using Large Language Models
Assessing vulnerability detection tools for smart contracts requires datasets with known ground truth, yet such datasets are scarce and difficult to build by hand. We propose an approach that uses Large Language Models LLMs to automatically inject vulnerabilities into Solidity smart contracts, an...
CyberForge: Verified Vulnerability Injection at Repository Level for Cybersecurity Agent Training
Despite recent advances, frontier large language model LLM agents remain limited in discovering and patching complex vulnerabilities in real-world software. Generally available agents can already aid attackers, who only need to find one exploitable weakness, while defenders must continuously...
CVE-2026-18613
A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.setconfig of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the...
Injection io.netty:netty-codec-dns Dependency in Confluence Data Center
This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Injection vulnerability was introduced in versions 7.0.1, 7.4.0, 7.13.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0,...
CVE-2026-9422
A vulnerability was identified in KLiK SocialMediaWebsite 1.0. This issue affects some unknown processing of the component HTTP POST Request Parameter Handler. Such manipulation leads to injection. The attack can be launched remotely. The exploit is publicly available and might be used...
CVE-2026-37343
SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manageuser.php...
Towards Personalizing Secure Programming Education with LLM-Injected Vulnerabilities
According to constructivist theory, students learn software security more effectively when examples are grounded in their own code. Generic examples often fail to connect with students' prior work, limiting engagement and understanding. Advances in LLMs are now making it possible to automatically...
CVE-2023-4450
A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed t...
EUVD-2021-0486
Malware in sbrugna...
EUVD-2020-20886
Malware in sbrugna...
EUVD-2021-1081
Malware in sbrugna...
EUVD-2010-4793
Malware in sbrugna...
EUVD-2012-2503
Malware in sbrugna...
EUVD-2013-1841
Malware in sbrugna...
EUVD-2014-7138
Malware in sbrugna...
EUVD-2015-0231
Malware in sbrugna...