cve-bench

CVE-Bench Un benchmark para evaluar agentes de LLM en la corrección de vulnerabilidades de seguridad reales. Los agentes se ejecutan dentro de contenedores Docker aislados y se puntúan según la suite de pruebas de seguridad del mantenedor. Requisitos Python 3.12+ Docker OPENAIAPIKEY,...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

file-unpumper

file-unpumper file-unpumper es una potente utilidad de línea de comandos diseñada para limpiar y analizar archivos ejecutables portátiles PE. Proporciona una variedad de funciones para ayudar a desarrolladores y profesionales de seguridad a trabajar con archivos PE de manera más efectiva...

bn-uefi-helper

bn-uefi-helper ATENCIÓN: Este plugin ha sido obsoleto. Consulta EFI Resolver Descripción Plugin auxiliar para analizar firmware UEFI. Este plugin incluye las siguientes características: Aplicar el prototipo correcto a la función de punto de entrada Corregir segmentos para que todos sean RWX y...

opensource_defect_repare_cc

Requisitos Detección y corrección de vulnerabilidades En el proyecto, el repositorio de código en el directorio code contiene varias vulnerabilidades conocidas. Debes reescribir el módulo central del proyecto la interfaz permanece completamente igual, la implementación cambia, la similitud antes ...

Vulnera

Strix The open-source AI pentesting tool. Autonomous AI h...

PT-2026-63538

Name of the Vulnerable Software and Affected Versions Drupal Email Login OTP versions . Description A security issue exists in the Drupal Email Login OTP project. The project is currently marked as unsupported, and the maintainer has not provided a fix for this issue. Recommendations At the momen...

Code-Centric Detection of Vulnerability-Fixing Commits: A Unified Benchmark and Empirical Study

Automated detection of vulnerability-fixing commits VFCs is critical for timely security patch deployment, as advisory databases lag patch releases by a median of 25 days and many fixes never receive advisories. We present a comprehensive evaluation of code language model based VFC detection...

Build Fast, Build Secure: Wiz findings are now in Lovable

With Wiz in Lovable, every builder can catch and fix risks in real time, keeping apps secure as they’re created...

MAS-SZZ: Multi-Agentic SZZ Algorithm for Vulnerability-Inducing Commit Identification

Accurate vulnerability-inducing commit identification serves as a foundation for a series of software security tasks, such as vulnerability detection and affected version analysis. A straightforward solution is the SZZ algorithm, which traces back through the code history to identify the earliest...

OpenAI Launches GPT-5.4-Cyber to Boost Defensive Cybersecurity

OpenAI unveils GPT-5.4-Cyber, a cybersecurity-focused model built to help defenders analyze malware and fix software bugs. The company is also expanding its Trusted Access for Cyber TAC program to thousands of verified experts...

EUVD-2018-0178

Malware in sbrugna...

EUVD-2019-15295

Malware in sbrugna...

EUVD-2025-20291

Malicious code in bioql PyPI...

EUVD-2023-0027

Malicious code in bioql PyPI...

EUVD-2025-12986

Malicious code in bioql PyPI...

EUVD-2025-19810

Malicious code in bioql PyPI...

EUVD-2024-2129

Malicious code in bioql PyPI...

PatchSeeker: Mapping NVD Records to Their Vulnerability-Fixing Commits with LLM Generated Commits and Embeddings

Software vulnerabilities pose serious risks to modern software ecosystems. While the National Vulnerability Database NVD is the authoritative source for cataloging these vulnerabilities, it often lacks explicit links to the corresponding Vulnerability-Fixing Commits VFCs. VFCs encode precise code...

CVE-2025-38305

In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp-nvclocks check logic in ptpvclockinuse There is no disagreement that we should check both ptp-isvirtualclock and ptp-nvclocks to check if the ptp virtual clock is in use. However, when we acquire ptp-nvclocksmux t...