16123 matches found
SoK: A Large-Scale Empirical Study of Emulation-Based Dynamic Analysis Research for ARM Cortex-M Firmware (Extended Version)
Microcontroller MCU-based devices are increasingly pervasive, making efficient, scalable firmware security analysis critical. Recent firmware re-hosting work enables automated vulnerability assessment, yet two gaps remain. First, existing tools are evaluated on limited, heavily overlapping...
Behavior-Centric Malware Classification with Fine-Grained Malicious Logic Localization
Effective malware analysis requires understanding not only whether a program is malicious, but also which behaviors it exhibits and where those behaviors originate in the code. Existing machine-learning-based malware detectors largely operate as black boxes, providing limited insight into the...
Joern 4.0.641
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
CVE-2026-98044
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This issue allows a privileged local user to cause a Denial of Service DoS or unexpected program rejection by loading a specially crafted BPF program containing legacy packet-load instructions inside callback functions. D...
honeypot-stuff
honeypot-stuff I am a ho...
Beyond Account-Level Risk: An Evidence-to-Action Pipeline for Detecting Fraud Rings
Linkage analysis connects accounts, devices and infrastructure to detect coordinated fraud rings that traditional account-level risk controls may fail to identify...
Joern 4.0.640
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Trajectory-Level Security Debt in LLM Coding Agents
LLM coding agents can traverse hundreds of intermediate code states before submitting a solution. Evaluating only the final artifact leaves the evolution of security findings unmeasured. We introduce the Security Debt Line Integral SDLI, which accumulates static-analysis risk when an agent reache...
Cheap to Hypothesize, Costly to Verify: The Defense Surface of Agentic Vulnerability Discovery
Autonomous LLM agents turn vulnerability discovery into a repository-scale search: they generate many vulnerability hypotheses but can verify only a subset under a finite budget. We show that autonomous vulnerability discovery exhibits a hypothesis-verification asymmetry, where verifying a...
xss
XSSentinel β Comprehensive XSS Detection Framework A mult...
wbx
wbx A white-box web application security testing tool. Point...
Sandb0x-Xtract0r
SandB0x-Xtract0r An automated, cross-platform security analysis engine for safely detonating suspicious files, binaries, and applications. π¬ Watch the Project Demo π» Tech Stack Core Programming Languages, Core Systems !Darthttps://img...
log-sentinel
log-sentinel !CIhttps://github.com/07espigares/log-sentin...
SpectralCovert
π‘ SpectralCovert -brightgreen.svg Deterministic Cryptographic Network Covert Channel & Shannon Entropy Leak Detector Developed by ΓΔ±nar @prox0959 Academic Grade | Zero External Dependencies | Sub-Millisecond Analysis π¬ Overview & Problem Statement Modern firewalls, deep packet inspection DPI...
org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-94397 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)
org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-94397 Source advisory: MEND:CVE-2026-94397...
org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-94398 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)
org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-94398 Source advisory: MEND:CVE-2026-94398...
CVE-2026-100584
OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...
EUVD-2026-87467
OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...
Joern 4.0.639
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...