nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

cve-bench

CVE-Bench A benchmark for evaluating LLM agents on fixing real-world security vulnerabilities. Agents run inside sandboxed Docker containers and are scored against the maintainer's security test suite. Requirements Python 3.12+ Docker OPENAIAPIKEY, ANTHROPICAPIKEY, and/or POOLSIDEAPIKEY in your...

file-unpumper

file-unpumper file-unpumper is a powerful command-line utility designed to clean and analyze Portable Executable PE files. It provides a range of features to help developers and security professionals work with PE files more effectively. Features PE Header Fixing : file-unpumper can fix and align...

bn-uefi-helper

bn-uefi-helper ATTENTION : Ce plugin a été déprécié. Voir EFI Resolver Description Plugin d'aide pour analyser le firmware UEFI. Ce plugin contient les fonctionnalités suivantes : Appliquer le prototype correct à la fonction point d'entrée Corriger les segments pour que tous soient RWX et aient l...

opensource_defect_repare_cc

Требования Поиск и исправление уязвимостей В репозиториях кода в каталоге code имеется ряд известных уязвимостей. Вам необходимо переписать основной модуль этого проекта интерфейсы полностью неизменны, реализация изменена, сходство до и после рефакторинга не превышает 20%; все сигнатуры...

Vulnera

Strix The open-source AI pentesting tool. Autonomous AI h...

PT-2026-63538

Name of the Vulnerable Software and Affected Versions Drupal Email Login OTP versions . Description A security issue exists in the Drupal Email Login OTP project. The project is currently marked as unsupported, and the maintainer has not provided a fix for this issue. Recommendations At the momen...

Code-Centric Detection of Vulnerability-Fixing Commits: A Unified Benchmark and Empirical Study

Automated detection of vulnerability-fixing commits VFCs is critical for timely security patch deployment, as advisory databases lag patch releases by a median of 25 days and many fixes never receive advisories. We present a comprehensive evaluation of code language model based VFC detection...

Build Fast, Build Secure: Wiz findings are now in Lovable

With Wiz in Lovable, every builder can catch and fix risks in real time, keeping apps secure as they’re created...

MAS-SZZ: Multi-Agentic SZZ Algorithm for Vulnerability-Inducing Commit Identification

Accurate vulnerability-inducing commit identification serves as a foundation for a series of software security tasks, such as vulnerability detection and affected version analysis. A straightforward solution is the SZZ algorithm, which traces back through the code history to identify the earliest...

OpenAI Launches GPT-5.4-Cyber to Boost Defensive Cybersecurity

OpenAI unveils GPT-5.4-Cyber, a cybersecurity-focused model built to help defenders analyze malware and fix software bugs. The company is also expanding its Trusted Access for Cyber TAC program to thousands of verified experts...

EUVD-2018-0178

Malware in sbrugna...

EUVD-2019-15295

Malware in sbrugna...

EUVD-2025-20291

Malicious code in bioql PyPI...

EUVD-2023-0027

Malicious code in bioql PyPI...

EUVD-2025-12986

Malicious code in bioql PyPI...

EUVD-2025-19810

Malicious code in bioql PyPI...

EUVD-2024-2129

Malicious code in bioql PyPI...

PatchSeeker: Mapping NVD Records to Their Vulnerability-Fixing Commits with LLM Generated Commits and Embeddings

Software vulnerabilities pose serious risks to modern software ecosystems. While the National Vulnerability Database NVD is the authoritative source for cataloging these vulnerabilities, it often lacks explicit links to the corresponding Vulnerability-Fixing Commits VFCs. VFCs encode precise code...

CVE-2025-38305

In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp-nvclocks check logic in ptpvclockinuse There is no disagreement that we should check both ptp-isvirtualclock and ptp-nvclocks to check if the ptp virtual clock is in use. However, when we acquire ptp-nvclocksmux t...