kernel: HID: core: Harden s32ton() against conversion to 0 bits

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...

BGPFuzz: Automated Configuration Fuzzing of the Border Gateway Protocol

Telecommunications networks rely on configurations to define routing behavior, especially in the Border Gateway Protocol BGP, where misconfigurations can lead to severe outages and security breaches, as demonstrated by the 2021 Facebook outage. Unlike existing approaches that rely on synthesis or...

PBFuzz: Agentic Directed Fuzzing for PoV Generation

Proof-of-Vulnerability PoV input generation is a critical task in software security and supports downstream applications such as path generation and validation. Generating a PoV input requires solving two sets of constraints: 1 reachability constraints for reaching vulnerable code locations, and ...

ReFuzz: Reusing Tests for Processor Fuzzing with Contextual Bandits

Processor designs rely on iterative modifications and reuse well-established designs. However, this reuse of prior designs also leads to similar vulnerabilities across multiple processors. As processors grow increasingly complex with iterative modifications, efficiently detecting vulnerabilities...

LFI Fuzzer

Fuzzing module for Local File Inclusion vulnerabilities. Tests various LFI bypass techniques and payloads. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.scanner.http.moduleresult import finalizehttpscannerrun, targetbaseurl from lib.protocols.http.httpclient import...

Fuzz CANBUS

Fuzzes CAN bus with various message patterns to discover vulnerabilities !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Fuzzer - Fuzzes CAN bus with various message patterns Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo,...

tinyusb:msc: Crash in msc

Detailed Report: https://oss-fuzz.com/testcase?key=6065053163126784 Project: tinyusb Fuzzing Engine: libFuzzer Fuzz Target: msc Job Type: libfuzzerasantinyusb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000f2010100 Crash State: msc Sanitizer: address ASAN Recommended Security...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6629565679337472 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

Effective Command-Line Interface Fuzzing with Path-Aware Large Language Model Orchestration

Command-line interface CLI fuzzing tests programs by mutating both command-line options and input file contents, thus enabling discovery of vulnerabilities that only manifest under specific option-input combinations. Prior works of CLI fuzzing face the challenges of generating semantics-rich opti...

ruby-web-vulnerability-tester

ruby-web-vulnerability-tester 🔎 Ruby Web Application Vulnera...

OESA-2025-2710 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light Magic for use in computer imaging applications. Security Fixes: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture...

OESA-2025-2713 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light Magic for use in computer imaging applications. Security Fixes: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture...

OESA-2025-2712 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light Magic for use in computer imaging applications. Security Fixes: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture...

kimageformats:kimgio_hdr_fuzzer: Use-of-uninitialized-value in HDRHandler::read

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4576582451920896 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiohdrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ruby:fuzz_prism: Heap-use-after-free in parse_blocklike_parameters

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5052092273459200 Project: ruby Fuzzing Engine: afl Fuzz Target: fuzzprism Job Type: aflasanruby Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x7b242a2e0a20 Crash State:...

mosquitto:broker_fuzz_password_file: Heap-use-after-free in password_file__cleanup

Project: https://github.com/eclipse/mosquitto.git Detailed Report: https://oss-fuzz.com/testcase?key=4705696852803584 Project: mosquitto Fuzzing Engine: afl Fuzz Target: brokerfuzzpasswordfile Job Type: aflasanmosquitto Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

ruby:fuzz_prism: Heap-buffer-overflow in parser_lex

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4643146224173056 Project: ruby Fuzzing Engine: afl Fuzz Target: fuzzprism Job Type: aflasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7a57fd6e06cf Crash State:...

ThreadFuzzer: Fuzzing Framework for Thread Protocol

With the rapid growth of IoT, secure and efficient mesh networking has become essential. Thread has emerged as a key protocol, widely used in smart-home and commercial systems, and serving as a core transport layer in the Matter standard. This paper presents ThreadFuzzer, the first dedicated...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5035930932281344 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

Mozilla Thunderbird < 45.7

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 45.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-03 advisory. - A use-after-free vulnerability in the Media Decoder when working with media files when some events are...