echidna

Echidna: A Fast Smart Contract Fuzzer Echidna is a weird creature that eats bugs and is highly electrosensitive with apologies to Jacob Stanley More seriously, Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smart contracts. It uses sophisticated grammar-based...

ATFuzzer

ATFuzzer "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" is accepted to the 35th Annual Computer Security Applications Conference ACSAC 2019. https://syed-rafiul-hussain.github.io/wp-content/uploads/2019/11/atfuzz.pdf Abstract This paper focuses ...

slither

Slither, the smart contract static analyzer Join the Empire Hacking Slack - Discussions and Support Slither is a Solidity & Vyper static analysis framework written in Python3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to...

xyntia

This repository does not have a README...

gosentry

gosentry gosentry is a security-focused fork of the Go toolchain, integrating numerous features for state-of-the-art fuzzing campaigns on Go codebases. If you were using go test -fuzz before, you should use gosentry as a replacement. It comes with various fuzzing improvements and bug detectors th...

t-reqs

T-Reqs HTTP Fuzzer T-Reqs T wo Req uests is a grammar-based HTTP Fuzzer written as a part of the paper titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021. BibTeX of the paper: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

zeek-spicy-openvpn

zeek-spicy-openvpn This is a protocol analyzer that detects OpenVPN traffic. You must install Spicy to use this package. Blogs and webinars detailing the development of this protocol analyzer: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...

umberto

Umberto Umberto is a library designed for mutating generic structured data e.g., JSON, XML, X.509 and a command line application wrapping this functionality. It can apply a variety of mutations, synthesize totally new values, and apply existing mutators e.g. Radamsa to structure components. If...

EulerOS 2.0 SP11 : bison (EulerOS-SA-2026-4214)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...

pastego

pastego Extrae/Parsea Pastebin usando GO y expresión gramatical PEG. pastego.png Instalación $ go get -u github.com/notdodo/pastego Uso Las palabras clave de búsqueda distinguen entre mayúsculas y minúsculas. pastego -s "password,keygen,PASSWORD" Puedes usar operadores booleanos para reducir fals...

nautilus

Nautilus 2.0 Nautilus es un fuzzer basado en gramática y guiado por cobertura. Puedes usarlo para mejorar tu cobertura de pruebas y encontrar más errores. Al especificar la gramática de entradas semi válidas, Nautilus es capaz de realizar mutaciones complejas y descubrir casos de prueba más...

CLEANSTART-2026-WN90580 flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature

Security vulnerability affects the apache-hive package. A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature...

CLSA-2026-1791371082 Fix CVE(s): CVE-2026-78002

SECURITY UPDATE: Heap buffer overflow in RainerScript replace - debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the full failed partial-match length in doFuncReplace in grammar/rainerscript.c, so the allocated result matches what the copy pass writes -...

CLSA-2026-1791277470 Fix CVE(s): CVE-2026-78002

SECURITY UPDATE: Heap buffer overflow in RainerScript replace - debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the full failed partial-match length in doFuncReplace in grammar/rainerscript.c, so the allocated result matches what the copy pass writes -...

CLSA-2026-1791277281 Fix CVE(s): CVE-2026-78002

SECURITY UPDATE: Heap buffer overflow in RainerScript replace - debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the full failed partial-match length in doFuncReplace in grammar/rainerscript.c, so the allocated result matches what the copy pass writes -...

EUVD-2026-92847

vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service 3 sites...

CVE-2026-105757

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by t...

PYSEC-2026-4199

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by t...

PYSEC-2026-4199

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by t...