13188 matches found
Exposing Hidden Interfaces: LLM-Guided Type Inference for Reverse Engineering MacOS Private Frameworks
Private macOS frameworks underpin critical services and daemons but remain undocumented and distributed only as stripped binaries, complicating security analysis. We present MOTIF, an agentic framework that integrates tool-augmented analysis with a finetuned large language model specialized for...
Security in the Era of Perceptive Networks: A Comprehensive Taxonomic Framework for Integrated Sensing and Communication Security
Integrated Sensing and Communication ISAC represents a significant shift in the 6G landscape, where wireless networks both sense the environment and communicate. While prior comprehensive surveys have established foundational elements of ISAC security, discussed perception-focused security models...
Malicious code in dstny-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b284da9586db3d25955c197277419786676841a572ee83eb99a463072eff3dec The package dstny-utils was found to contain malicious code. Source: ossf-package-analysis...
SecurityAnalystTasks
SecurityAnalystTasks This repository contains hands-on cyberse...
Comparative Evaluation of VAE, GAN, and SMOTE for Tor Detection in Encrypted Network Traffic
Encrypted network traffic poses significant challenges for intrusion detection due to the lack of payload visibility, limited labeled datasets, and high class imbalance between benign and malicious activities. Traditional data augmentation methods struggle to preserve the complex temporal and...
MCP-SandboxScan: WASM-Based Secure Execution and Runtime Analysis for MCP Tools
Tool-augmented LLM agents raise new security risks: tool executions can introduce runtime-only behaviors, including prompt injection and unintended exposure of external inputs e.g., environment secrets or local files. While existing scanners often focus on static artifacts, analyzing runtime...
CVE-2025-61922
creationtimestamp| type| source ---|---|--- 2026-01-02 21:00:05+00:00| published-proof-of-concept| Telegram/Ph5XVLoVKPKzeNd3zHbruXHl3wn31oqUjoUVrNk6if5Q2TM 2026-01-02 22:53:23+00:00| published-proof-of-concept| https://github.com/g0vguy/CVE-2025-61922-PoC 2026-01-02 22:54:29+00:00| seen|...
Exploit for Deserialization of Untrusted Data in Facebook React
🔍 CVE-2025-55182-Scanner - Detect and Secure Your Applications...
Scapy Packet Manipulation Tool 2.7.0
Scapy is a powerful interactive packet manipulation tool, packet generator, network scanner, network discovery tool, and packet sniffer. It provides classes to interactively create packets or sets of packets, manipulate them, send them over the wire, sniff other packets from the wire, match answe...
Malicious code in rules-playground (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cd14651deea0e986dc2d7f9b11494d8c96a074ed9112aaa16076ea19b2b718 The package rules-playground was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-4 Malicious code in rules-playground (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cd14651deea0e986dc2d7f9b11494d8c96a074ed9112aaa16076ea19b2b718 The package rules-playground was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-3 Malicious code in rules-deployer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849a58d27ed0090633a72330c705b5849146aa1493961574c6a11dc758e28e34 The package rules-deployer was found to contain malicious code. Source: ossf-package-analysis...
portswigger-labs-writeups
portswigger-labs-writeups Complete writeups for P...
Cracking IoT Security: Can LLMs Outsmart Static Analysis Tools?
Smart home IoT platforms such as openHAB rely on Trigger Action Condition TAC rules to automate device behavior, but the interplay among these rules can give rise to interaction threats, unintended or unsafe behaviors emerging from implicit dependencies, conflicting triggers, or overlapping...
From Consensus to Chaos: A Vulnerability Assessment of the RAFT Algorithm
In recent decades, the RAFT distributed consensus algorithm has become a main pillar of the distributed systems ecosystem, ensuring data consistency and fault tolerance across multiple nodes. Although the fact that RAFT is well known for its simplicity, reliability, and efficiency, its security...
SQLite report about CVE-2026-51296CVE-2026-51297CVE-2026-51300CVE-2026-51302CVE-2026-51303CVE-2026-51304
These are unreproducible. They appear to be AI hallucinations. See the analysis at JFrog.com...
CellSecInspector: Safeguarding Cellular Networks Via Automated Security Analysis on Specifications
The complexity, interdependence, and rapid evolution of 3GPP specifications present fundamental challenges for ensuring the security of modern cellular networks. Manual reviews and existing automated approaches, which often depend on rule-based parsing or small sets of manually crafted security...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992791)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992791 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in astvhubinitdev The variable d-name, returned by...