100 matches found
lava
LAVA: 대규모 자동 취약점 주입 버그 탐지 도구를 평가하고 개선하는 것은 현재 정답 코퍼스즉, 트리거 입력이 있는 알려진 버그를 가진 소프트웨어의 부족으로 인해 어렵습니다. LAVA는 소프트웨어에 버그를 자동으로 주입하여 이 문제를 해결하려고 시도합니다. 모든 LAVA 버그는 이를 트리거하는 입력과 함께 제공되지만 일반 입력은 그렇게 할 가능성이 매우 낮습니다. 이러한 취약점은 합성되었지만, 우리는 여전히 현실적이라고 주장합니다. 왜냐하면 그것들이 프로그램 깊숙이 내장되어 있고 실제 입력에 의해 트리거되기 때문입니다. 우리...
Automated Vulnerability Injection in Smart Contracts Using Large Language Models
Assessing vulnerability detection tools for smart contracts requires datasets with known ground truth, yet such datasets are scarce and difficult to build by hand. We propose an approach that uses Large Language Models LLMs to automatically inject vulnerabilities into Solidity smart contracts, an...
CodePoisonRAG: Knowledge Poisoning Attacks on Retrieval-Augmented Code Generation
Retrieval-Augmented Code Generation RACG improves LLM-based software development by retrieving external code artifacts, documentation, and patches, and incorporating them into the generation context. This reliance on external knowledge introduces a critical trust boundary: poisoned artifacts can...
CyberForge: Verified Vulnerability Injection at Repository Level for Cybersecurity Agent Training
Despite recent advances, frontier large language model LLM agents remain limited in discovering and patching complex vulnerabilities in real-world software. Generally available agents can already aid attackers, who only need to find one exploitable weakness, while defenders must continuously...
CVE-2026-18613
A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.setconfig of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the...
Injection io.netty:netty-codec-dns Dependency in Confluence Data Center
This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Injection vulnerability was introduced in versions 7.0.1, 7.4.0, 7.13.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0,...
CVE-2026-9422
A vulnerability was identified in KLiK SocialMediaWebsite 1.0. This issue affects some unknown processing of the component HTTP POST Request Parameter Handler. Such manipulation leads to injection. The attack can be launched remotely. The exploit is publicly available and might be used...
CVE-2026-37343
SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manageuser.php...
Towards Personalizing Secure Programming Education with LLM-Injected Vulnerabilities
According to constructivist theory, students learn software security more effectively when examples are grounded in their own code. Generic examples often fail to connect with students' prior work, limiting engagement and understanding. Advances in LLMs are now making it possible to automatically...
CVE-2023-4450
A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed t...
EUVD-2021-0486
Malware in sbrugna...
EUVD-2020-20886
Malware in sbrugna...
EUVD-2021-1081
Malware in sbrugna...
EUVD-2010-4793
Malware in sbrugna...
EUVD-2012-2503
Malware in sbrugna...
EUVD-2013-1841
Malware in sbrugna...
EUVD-2014-7138
Malware in sbrugna...
EUVD-2014-6124
Malware in sbrugna...