267 matches found
oss-fuzz
OSS-Fuzz: Continuous Fuzzing for Open Source Software Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and...
curveball-plus
curveball-plus simulation experiment of Curveball CVE-2020-0601 attacks under ECQV implicit certificates with Windows-like verifiers This file is constantly updated!...
CopyFail-Experiment
Just an experiment to verify that the LLM can find this vuln and construct a working exploit. Usage gcc -o poc poc.c ./poc...
CVE-2012-4681-Armoring
CVE-2012-4681-Armoring Overview A manual antivirus evasion armoring experiment for CVE-2012-4681 inspired by http://security-obscurity.blogspot.com/2012/11/java-exploit-code-obfuscation-and.html. Base Exploit: http://pastie.org/4594319 Results as of 9/26/2014 and 8/2/2016 Sample| Notes| 2014 Scor...
experiments
Experiments Repository of various experiments / PoC. debugging-secure-kernel: PoC gdb debugging the Windows 10 secure kernel, on top of QEMU KVM dns: Experiments regarding DNS / Certificate transparency / Homoglyphs Attack Surface Reduction: Demystifying Windows Attack Surface Reduction internals...
cve-2021-44228
cve-2021-44228 This is the mid-term assignment archive of the "Vulnerability Analysis Lab" Junior Fall-Winter at Anhui University. The full document is at https://testgames.me/2024/11/10/cve-2021-44228/...
os-experiment-4
os-experiment-4 os experiment 4 CVE-2016-5195 ./run.sh...
CVE-2017-1000117-sl
CVE-2017-1000117-sl Experiment of CVE-2017-1000117 usage $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117-sl.git...
autonomy-dev (>=0.2.40, <=0.2.70), cluster-experiment-utils (>=0.0.1, <=0.0.20) +26 more potentially affected by CVE-2026-114134 via black (23.1.0)
black PYPI version 23.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - autonomy-dev =0.2.40, =0.0.1, =0.1.2, =0.1.0, =0.0.3, =0.1.0, =0.13.0b0, =2.57.0, =0.7.0, =0.0.1, =0.1.0rc0, =0.1.1 - openai-assistants-cli 0.1.1 and...
dagster-mlflow (>=0.18.0, <=0.18.3), dbx (0.5.0) +13 more potentially affected by CVE-2026-53995 via mlflow (1.26.1)
mlflow PYPI version 1.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.18.0, =0.2.5, =0.0.1, =0.3.3, =0.2.0.dev3, =0.2.0.dev2, =0.40.2.dev25, =0.40.2.dev18, =0.39.1rc2, =3.2.7, =0.0.1, =0.1.2, =0.2.1...
autonomize-model-sdk (>=1.0.6, <=1.1.21), experiment-goodies (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2026-53995 via mlflow (2.20.1)
mlflow PYPI version 2.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - autonomize-model-sdk =1.0.6, =0.1.1, =0.1.2 - terratorch 0.99.8 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...
EUVD-2026-78207
GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text,...
PT-2026-85556
Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can register clients, instantiate Repo resources, and invoke arbitrary methods to read experiments or delete runs...
Malicious code in actions-experiment (npm)
The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis a3571367d4274d4ca5d5c2cd7b400c40b4d656c2c58fb0746e8372cb24910c5b The OpenSSF Package Analysis project identified 'actions-experiment' @ 95.95.95 npm as malicious. It is considered malicious...
Malware in amplitude-experiment
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview amplitude-experiment is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in amplitude-experiment (npm)
Source: amazon-inspector 110901fcd2d59ab6eed44d962da05830610e5c3cb03ca103db5a379e6c6052e4 package.json declares a single dependency whose key equals the package's own name amplitude-experiment and whose source is the bare HTTPS URL https://repo.securityctrl.com/amplitude-experiment instead of a...
Malicious code in amplitude-experiment (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110901fcd2d59ab6eed44d962da05830610e5c3cb03ca103db5a379e6c6052e4 package.json declares a single dependency whose key equals the package's own name amplitude-experiment and whose source is the bare HTTPS URL...
MAL-2026-15496 Malicious code in amplitude-experiment (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110901fcd2d59ab6eed44d962da05830610e5c3cb03ca103db5a379e6c6052e4 package.json declares a single dependency whose key equals the package's own name amplitude-experiment and whose source is the bare HTTPS URL...
