606 matches found
fuzzing
libfuzzer-workshop Materials of "Modern fuzzing of C/C++ Projects" workshop. The first version of the workshop had been presented at ZeroNights'16 security conference. Disclaimer This workshop was originally developed in 2016. As of today 2021 and beyond, the practical side of the workshop might ...
joern
Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...
[SECURITY] Fedora 45 Update: libcmis-0.6.3-2.fc45
LibCMIS is a C/C++ client library for working with CM content management interfaces. The primary supported interface which gave the library its name is CMIS, which allows applications to connect to any ECM behaving as a CMIS server Alfresco or Nuxeo are examples of open source ones. Another...
Rocky Linux 8.6 [CIQ] Security Update: xmlrpc-c / xmlrpc-c-apps / xmlrpc-c-apps-debuginfo / xmlrpc-c-c++ / etc Multiple Vulnerabilities (ciqsa-2026_0870)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260870 advisory. This advisory aggregates security fixes for the xmlrpc-c SRPM in CIQ LTS 8.6. It addresses 7 CVEs: CVE-2022-22827, CVE-2022-22823, CVE-2021-46143,...
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent
If you 're new to fuzzing and want to learn the fundamentals first, check out our Fuzzing 101 course at gh.io/fuzzing101. Continuous fuzzing is not a magic solution that solves all your problems . Even projects that have been enrolled in OSS-Fuzz for years can still hide critical bugs, and the...
[SECURITY] Fedora 44 Update: stb-0^20260802.2c980bb-2.fc44
Single-file public domain libraries for C/C++...
[SECURITY] Fedora 43 Update: stb-0^20260802.2c980bb-2.fc43
Single-file public domain libraries for C/C++...
[SECURITY] Fedora 45 Update: stb-0^20260802.2c980bb-2.fc45
Single-file public domain libraries for C/C++...
GANADI: Uncovering C/C++ OSS Reuse Genealogies Via Pivotal Function-Based Clustering to Enhance Supply Chain Security
We present GANADI, a systematic approach for identifying C/C++ OSS reuse genealogies to enhance software supply chain security. Understanding OSS reuse genealogy is crucial for improving SBOM completeness and prioritizing security remediation across supply chains. Although existing approaches can...
LLMVul: A Vulnerability-Labeled Dataset of LLM-Generated C/C++ Functions from Real Production Repositories
Large language models LLMs are increasingly used to generate and assist with software development, yet existing vulnerability datasets largely focus on human-written code or controlled prompting environments. This limits the ability to study security weaknesses in LLM-generated code as it appears...
On Predicting Vulnerability Severity Using In-Context Learning: An Industrial Case Study
Modern software systems require earlier and more scalable vulnerability severity assessment to reduce exposure to high-impact security flaws. Security analysts typically assign CVSS scores, but this manual triage does not scale with the growth of disclosed vulnerabilities and often depends on clo...
MINI-5X36-R5MX-5HJG
Bulletin has no description...
MINI-8WGG-X7FP-W6PG
Bulletin has no description...
Joern 4.0.607
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
MINI-XPH6-PFRX-8JMH
Bulletin has no description...
MINI-VJPG-5VFH-6JP9
Bulletin has no description...
MINI-HM6M-52WH-8H85
Bulletin has no description...
MINI-JHXC-CXCH-5CC7
Bulletin has no description...