1790 matches found
FuzzAgent: Multi-Agent System for Evolutionary Library Fuzzing
Library fuzzing is essential for hardening the software supply chain, but adopting it at scale remains expensive. Practitioners still spend substantial effort on environment setup, struggle to generate harnesses that respect intricate API constraints, and lack reliable means to tell genuine libra...
Wapiti Web Application Vulnerability Scanner 3.3.0
Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...
No Attack Required: Semantic Fuzzing for Specification Violations in Agent Skills
LLM-powered agents can silently delete documents, leak credentials, or transfer funds on a routine user request, not because the agent was attacked, but because the skill it invoked broke its own declared safety rules. We call these specification violations: benign inputs cause a skill to breach...
Agentic Fuzzing: Opportunities and Challenges
Fuzzers and static analyzers find many bugs but struggle with logic bugs in mature codebases. Triggering such a bug often requires multi-step reasoning that produces no distinctive execution feedback, and variants can appear across implementations too different for a single pattern to match. Rece...
kernel-exploit-intelligence
🐧 Kernel Exploit Intelligence KEI !KEI Logo./assets/logo...
Position: AI Security Policy Should Target Systems, Not Models
We present swarm-attack, an open-source adversarial testing framework in which multiple lightweight LLM agents coordinate through shared memory, parallel exploration, and evolutionary optimization. Together, our results demonstrate that both safety bypass of frontier models and software...
matio:matio_fuzzer: Heap-use-after-free in H5T__bit_find
Detailed Report: https://oss-fuzz.com/testcase?key=5566795263311872 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x78d4f63cd6b3 Crash State: H5Tbitfind H5Tconvfiloop H5Tconvfi Sanitizer:...
OrchJail: Jailbreaking Tool-Calling Text-To-Image Agents by Orchestration-Guided Fuzzing
Tool-calling text-to-image T2I agents can plan and execute multi-step tool chains to accomplish complex generation and editing queries. However, this capability introduces a new safety attack surface: harmful outputs may arise from tool orchestration, where individually benign steps combine into...
PT-2026-38982
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the x86 architecture, the load segments function modifies segment registers, which invalidates the GS base used by KCOV for per-cpu data. When CONFIG KCOV is enabled, any subsequent...
ExploitMind
ExploitMind Overview ExploitMind is an en...
AFL-ICP: Enhancing Industrial Control Protocol Reliability Via Specification-Guided Fuzzing
Industrial Control Protocols ICPs are critical to the reliability and stability of industrial infrastructure, yet their security is fundamentally compromised by a specification-blindness bottleneck. Modern fuzzers, constrained by observation-driven inference, struggle to penetrate deep protocol...
OSV-2026-678 UNKNOWN WRITE in ___interceptor_strncpy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=508899220 Crash type: UNKNOWN WRITE Crash state: interceptorstrncpy concathashstring ndpisearchsshtcp...
FunFuzz: An LLM-Powered Evolutionary Fuzzing Framework
Modern fuzzers increasingly use Large Language Models LLMs to generate structured inputs, but LLM-driven fuzzing is sensitive to prompt initialization and sampling variance, which can reduce exploration efficiency and lead to redundant inputs. We present FunFuzz, a multi-island evolutionary fuzzi...
OSV-2026-655 Heap-buffer-overflow in lj_record_idx
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=507646002 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ljrecordidx ljrecordins tracestate...
WP-Plugin-Fuzzer-PoC-
wpgarlic A proof-of-concept WordPress plugin fuzzer that led t...
From CRUD to Autonomous Agents: Formal Validation and Zero-Trust Security for Semantic Gateways in AI-Native Enterprise Systems
Enterprise software engineering is shifting away from deterministic CRUD/REST architectures toward AI-native systems where large language models act as cognitive orchestrators. This transition introduces a critical security tension: probabilistic LLMs weaken classical mechanisms for validation,...
readstat:fuzz_format_sas7bdat: Index-out-of-bounds in sas7bdat_submit_columns_if_needed
Project: https://github.com/WizardMac/ReadStat.git Detailed Report: https://oss-fuzz.com/testcase?key=5180794695122944 Project: readstat Fuzzing Engine: libFuzzer Fuzz Target: fuzzformatsas7bdat Job Type: libfuzzerubsanreadstat Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...
CLSA-2026-1775726631 binutils: Fix of 9 CVEs
CVE-2023-1972: fix heap buffer overflow in bfdelfslurpversiontables - CVE-2025-11412: fix out-of-bounds read in bfdelfgcrecordvtentry - CVE-2025-11413: fix out-of-bounds read in elflinkaddobjectsymbols - CVE-2025-11839: fix abort in tgtagtype with fuzzed input - CVE-2025-11840: fix SEGV from NULL...
Keras 3.13.0 HDF5 Shape Fuzzing for Robustness Testing
This script performs fuzz testing against Keras version 3.13.0 on randomly generated tensor shapes using NumPy and HDF5 to evaluate stability and error handling in file creation workflows...