Boucle-framework

Boucle Claude Code hooks that actually enforce your rules. 7 standalone hooks, plus enforce-hooks for CLAUDE.md policy, audit tooling, 1,900+ tests, and a searchable Claude Code gaps corpus with severity ratings and workarounds. Quick links: Check your setup · Install hooks · Known limitations ·...

drift-corpus

The Drift Corpus: Ring 0 Drift Corpus is the definitive, open-source repository of Windows Kernel patch diffs. These artifacts are produced using Drift Agent , ByteRay's automatic reverse engineering engine and part of the Argus-Systems platform. With Drift, we have successfully mapped, analyzed,...

PersonalStuff

PersonalStuff sax.tar.xz - Epic sax guy video in .m3u8 format. TelegramPrivacy.pdf - Privacy bug in Telegram. firefoxaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.lnk - Corpous for fuzzing liblnk. pack.sh - Standard packages to resolve common dependencies in Ubuntu 18.04. tcpcorpus.tar.xz - Corpous for...

lava

LAVA: Adición Automatizada de Vulnerabilidades a Gran Escala Evaluar y mejorar las herramientas de búsqueda de errores es actualmente difícil debido a la escasez de corpus de verdad fundamental es decir, software que tiene errores conocidos con entradas que los desencadenan. LAVA intenta resolver...

resmack-fuzz-test

Resmack Fuzz Test This project is an exploration of a feedback-driven fuzzer that uses: ptrace for instrumentation with dynamic memory breakpoints specified by the target process process snapshotting/restoring using /proc/pid/map, /proc/pid/clearrefs, and /proc/pid/pagemap using processvmwritev...

test-fuzz

test-fuzz test-fuzz is a Cargo subcommand and a collection of Rust macros to automate certain tasks related to fuzzing with afl.rs, including: generating a fuzzing corpus implementing a fuzzing harness test-fuzz accomplishes these in part using Rust's testing facilities. For example, to generate ...

vulnerability-research

Vulnerability Research My corpus of publicly disclosed vulnerabilities and other findings...

LibPNG_OSS-Fuzz

Fuzzing and Vulnerability Analysis of libpng Group Security Research Project About Fuzzing: Fuzzing is an automated software testing technique that provides invalid, unexpected, or random data as inputs to a program to discover bugs and vulnerabilities. Coverage-guided fuzzing uses code coverage...

On Evaluating Quantum Kernel Robustness for Low-Resource Cross-Corpus Audio Deepfake Detection

Synthetic speech detection is critical for audio security, but performance can degrade when labeled data are scarce and evaluation conditions differ from training. This study examines quantum kernel methods and lightweight neural models for cross-corpus audio deepfake detection under limited...

lava v3.3.1

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

SummaryXMLCorpusView.readxmlfragment reads a corpus file in 1 KiB blocks, appendingeach block to a growing fragment string, then calls VALIDXMLRE.matchfragmenton the full accumulated buffer every iteration. Because each iteration rescans theentire accumulated fragment, the total amount of work...

NLTK: Corpus Reader Sandbox Bypass

Summary NLTK corpus-reader constructors can still reach outside-root file and database reads before the nltk.pathsec sandbox boundary is enforced. The PoC shows the safe path blocked by pathsec.open, then LinThesaurusCorpusReader and PanLexLiteCorpusReader succeeding in the same process. Affected...

EUVD-2026-65524

NLTK: Corpus Reader Sandbox Bypass...

NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement

Summary Several corpus readers still step outside NLTK's symlink-aware trusted-root model. They derive in-root paths from trusted corpus state, convert those paths back into plain strings, and reopen them with built-in open rather than nltk.pathsec.open. Details - Vulnerability type: Path travers...

GHSA-P4RW-RVV2-7XWR NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement

Summary Several corpus readers still step outside NLTK's symlink-aware trusted-root model. They derive in-root paths from trusted corpus state, convert those paths back into plain strings, and reopen them with built-in open rather than nltk.pathsec.open. Details - Vulnerability type: Path travers...

EUVD-2026-65526

NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement...

EUVD-2026-67073

NLTK: Quadratic CPU Exhaustion in XMLCorpusView.readxmlfragment...

NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

Summary XMLCorpusView.readxmlfragment reads a corpus file in 1 KiB blocks, appending each block to a growing fragment string, then calls VALIDXMLRE.matchfragment on the full accumulated buffer every iteration. Because each iteration rescans the entire accumulated fragment, the total amount of wor...

CVE-2026-81723

A flaw was found in NLTK. This vulnerability, specifically in the XMLCorpusView.readxmlfragment function, allows a remote attacker to cause severe CPU consumption and a denial of service DoS by providing specially crafted, malformed XML corpus files. The flaw occurs because the system repeatedly...

Duplicate Advisory: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vp2x-qp44-57v7. This link is maintained to preserve external references. Original Description NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView.readxmlfragment that...