xss-vulnerability-scanner

Application Security: Automated Reflected XSS Web Fuzzer 📝...

netproto_toolkit

netprototoolkit Network protocol security research toolkit i...

pentest-cheatsheet

pentest-cheatsheet Commands, techniques and notes for penetrat...

mruby:mruby_fuzzer: Heap-buffer-overflow in lambda_body

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6192565519712256 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x75b0aed10258 Crash State:...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::dissectPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4599414946332672 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7b42ffd25579 Crash...

Protocol Prying: Systematic Vulnerability Research in the Apple AirDrop and Android Quick Share Proximity Transfer Protocols

Apple AirDrop and Google/Samsung Quick Share are proximity file-transfer protocols used by over five billion devices, yet their application-layer security properties remain largely unstudied because both stacks are proprietary and undocumented. Both protocols are reachable from wireless proximity...

CVE-2026-52948 i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl

In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2CTIMEOUT ioctl While fuzzing with Syzkaller, a persistent scheduletimeout: wrong timeout value warning was observed, accompanied by SMBus controller state machine corruption. The I2CTIMEOUT...

OSV-2026-963 Bad-cast to Ogre::HardwareBuffer from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=526758819 Crash type: Bad-cast Crash state: Bad-cast to Ogre::HardwareBuffer from invalid vptr Ogre::HardwareBuffer::unlockImpl Ogre::HardwareBuffer::unlock...

Reinforcement Learning for Software Vulnerability Analysis: A Systematic Review with Emphasis on C/C++ Source Code and Static Analysis

Vulnerability detection in C/C++ software remains a major security challenge due to code complexity, manual memory management, and the limitations of traditional static analysis. Reinforcement Learning RL has emerged as a promising approach, particularly for fuzzing, test generation, program...

PT-2026-55435

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=526224351 Crash type: Heap-use-after-free READ 8 Crash state: Wt::Http::Request::parseFormUrlEncoded Wt::CgiParser::parse fuzz-cgi.C...

PowerFuzz: Power-Based Black-Box Firmware Fuzzing

Fuzzing is widely used for software and hardware verification, offering an effective alternative to random testing. While gray-box fuzzers benefit from full visibility into the system under test and can leverage execution feedback such as branch coverage, these approaches are not applicable when...

janet:fuzz_dobytes: Crash in janet_bytecode_remove_noops

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=5398699837292544 Project: janet Fuzzing Engine: honggfuzz Fuzz Target: fuzzdobytes Job Type: honggfuzzasanjanet Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x753ecb908818 Crash State...

Revelio: Cost-Efficient Agentic Memory Safety Vulnerability Detection for Repository-Scale Codebases

Memory safety vulnerabilities remain a significant threat even for projects with extensive fuzzing and manual auditing. Recent results suggest that large language models hold great promise for detecting such vulnerabilities, but they are unreliable, at risk of hallucination, and challenging to...

libiec61850:fuzz_goose_subscriber: Heap-buffer-overflow in parseGoosePayload

Project: https://github.com/mz-automation/libiec61850.git Detailed Report: https://oss-fuzz.com/testcase?key=6523920434659328 Project: libiec61850 Fuzzing Engine: libFuzzer Fuzz Target: fuzzgoosesubscriber Job Type: libfuzzerasanlibiec61850 Platform Id: linux Crash Type: Heap-buffer-overflow READ...

libiec61850:fuzz_acse_parse: Heap-buffer-overflow in BerDecoder_decodeInt32

Project: https://github.com/mz-automation/libiec61850.git Detailed Report: https://oss-fuzz.com/testcase?key=5473465822674944 Project: libiec61850 Fuzzing Engine: afl Fuzz Target: fuzzacseparse Job Type: aflasanlibiec61850 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

kimageformats:kimgio_heif_fuzzer: Stack-use-after-scope in StreamReader_CApi::wait_for_file_size

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5003657637330944 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address:...

OSV-2026-925 Heap-buffer-overflow in ssh_config_parse_line_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523820519 Crash type: Heap-buffer-overflow READ 1 Crash state: sshconfigparselineinternal sshconfigparsestring sshclientconfigfuzzer.c...

PT-2026-52659

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523799837 Crash type: Heap-use-after-free READ 8 Crash state: gf node unregister BM ParseCommand gf bifs flush command list...

EUVD-2025-210156

A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parseoption src/if-options.c:1886, the code performs a member access on a NULL pointer of type 'struct dhcpopt' when an unexpected/invalid option token or parsing state caus...

CVE-2025-70102

A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parseoption src/if-options.c:1886, the code performs a member access on a NULL pointer of type 'struct dhcpopt' when an unexpected/invalid option token or parsing state caus...