nano-analyzer

Nano-analyzer A minimal LLM-powered zero-day vulnerability scanner byAISLE. Research prototype for demonstration purposes. This is a simple, single-file harness that is able to detect real zero-day vulnerabilities. Note that it is a prototype, biased towards C/C++ memory safety bugs, and will...

mlkem-native

mlkem-native mlkem-native is a secure, fast, and portable C90^C90 implementation of ML-KEM^FIPS203. It is a fork of the ML-KEM reference implementation^REF. All C code in mlkem/src/ and mlkem/src/fips202/, except for the backends for platforms other than AArch64 and x8664 and the debug code, is...

clr

CLR C hecker of L ifetimes and other R efinement types for Zig Video: https://www.youtube.com/watch?v=mf0WzTOe-40 Sponsorship: https://buymeacoffee.com/dnautics discuss on hn: https://news.ycombinator.com/item?id=42923829 discuss on lobste.rs: https://lobste.rs/s/9sitsj/clrcheckerforlifetimesothe...

kernel-c-to-rust-spike

Kernel C-to-Rust hardening spike: UVC descriptor parser Can a security-critical Linux kernel C parser be hardened by rewriting it in Rust, with the rewrite shown equivalent to the original and then formally verified? This spike runs the full loop on one target: the UVC video descriptor parser...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

xmloxide

xmloxide A pure Rust reimplementation of libxml2 — the de facto standard XML/HTML parsing library in the open-source world. libxml2 became officially unmaintained in December 2025 with known security issues. xmloxide aims to be a memory-safe, high-performance replacement that passes the same...

CVE-2026-52790

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a library-level memory safety issue that is reachable from an unmodified official sample server apps/server-basic/main.c over BACnet/IP resulting in a...

EUVD-2026-125535

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a library-level memory safety issue that is reachable from an unmodified official sample server apps/server-basic/main.c over BACnet/IP resulting in a...

CVE-2026-52790

The BACnet Stack C library for embedded systems contains a library-level memory safety issue in versions prior to 1.4.5, 1.5.1, and 1.6.0 . The vulnerability, located in writable Device string properties, is reachable via an unmodified official sample server (apps/server-basic/main.c) over BACnet...

CVE-2026-52790 BACnet Stack: bacnet_device.c stack-use-after-return in writable Device string properties

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a library-level memory safety issue that is reachable from an unmodified official sample server apps/server-basic/main.c over BACnet/IP resulting in a...

CVE-2026-39113

CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLAR Extension Executive Summary CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension. In an application that has loaded the extension, an attacker who can invoke sqlaruncompress with a controlled compressed blob...

GHSA-XCVG-W56Q-R89M Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

============================================================================ ANT-2026-CS7N494P high CWE-787 memory-safety Heap buffer overflow saving TIFF with libtiff when tags override image size Location: src/libImaging/TiffDecode.c:1035 in ImagingLibTiffEncode Commit:...

Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

============================================================================ ANT-2026-CS7N494P high CWE-787 memory-safety Heap buffer overflow saving TIFF with libtiff when tags override image size Location: src/libImaging/TiffDecode.c:1035 in ImagingLibTiffEncode Commit:...

CVE-2015-8710

Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...

KLA91416 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability can be exploited to cau...

PT-2026-145380

Name of the Vulnerable Software and Affected Versions xorg-x11-server versions prior to 21.1.25-2.1 xwayland versions prior to 24.1.14-2.1 Description Security issues were identified in the xorg-x11-server and xwayland packages within the openSUSE Tumbleweed GA media. Recommendations Update...

PT-2026-145373

Name of the Vulnerable Software and Affected Versions X.Org xwayland versions prior to 24.1.15 X Server versions prior to 21.1.26 Description A buffer overflow occurs when handling EDID Display-Range descriptors. This flaw allows a malicious monitor to cause the X server to crash or enable...

PT-2026-145374

Name of the Vulnerable Software and Affected Versions xorg-x11-server versions prior to 21.1.25-2.1 xwayland versions prior to 24.1.14-2.1 Description Security issues were identified in the xorg-x11-server and xwayland packages within the openSUSE Tumbleweed GA media. Recommendations Update...

PT-2026-145375

Name of the Vulnerable Software and Affected Versions xorg-x11-server versions prior to 21.1.25-2.1 xwayland versions prior to 24.1.14-2.1 Description Security issues were identified in the xorg-x11-server and xwayland packages within the openSUSE Tumbleweed GA media. Recommendations Update...

PT-2026-145377

Name of the Vulnerable Software and Affected Versions xorg-x11-server versions prior to 21.1.25-2.1 xwayland versions prior to 24.1.14-2.1 Description Security issues were identified in the xorg-x11-server and xwayland packages within the openSUSE Tumbleweed distribution. Recommendations Update...