54 matches found
0days-in-the-wild
0-days explotados en la naturaleza Este repositorio es una referencia de documentos sobre vulnerabilidades de día cero detectadas como explotadas en la naturaleza. Incluye tanto análisis de causa raíz RCA para cada exploit de día cero como una tabla que rastrea cada día cero. Estos documentos est...
threat-team
谷歌威胁情报组 注意：此仓库不再维护。 如需最新的入侵指标IOC和威胁研究，请参阅 谷歌云威胁情报博客 和免费的 Google Threat Intelligence / VirusTotal 集合。 此仓库包含与谷歌在2021年至2026年初发布的公开博文和报告相关的入侵指标IOC。IOC按年份组织，每个文件夹对应一篇特定的博文或报告。 如需了解检测为在野利用的零日漏洞，请参阅此仓库 here。其中包含每个零日漏洞利用的根本原因分析RCA以及追踪每个零日漏洞的表格。 许可证 我们已根据 Apache License Version 2.0 提供此内容。...
DeFiHackLabs
Debugging/Análisis Onchain de Transacciones: 1. Herramientas Autor original: Sun Traducción al español: Eloi Comunidad Discord Este artículo ha sido publicado en XREX y WTF Academy. Los recursos en línea eran escasos cuando empecé a aprender sobre análisis de transacciones onchain. Aun así,...
kernel-nday-exploits
Linux Kernel N-Day Exploits Local privilege escalation rese...
SPARC: Automated Root-Cause Analysis of Pre-Silicon Power Side-Channel Leakage in the Processor Design Flow
Power-Side-Channel Leakage PSCL originates from architectural and micro-architectural artifacts in a processor and poses a severe threat to the confidentiality of cryptographic software. Consequently, pre-silicon PSCL evaluation is indispensable for secure hardware design. Existing frameworks are...
security-research
Security Research OAuth / OIDC and auth-logic vulnerability...
CVE2PoC
CVE2PoC A prototype for generating real npm vulnerability PoC...
Exploit for CVE-2026-0532
CVE-2026-0...
Agentic Fuzzing: Opportunities and Challenges
Fuzzers and static analyzers find many bugs but struggle with logic bugs in mature codebases. Triggering such a bug often requires multi-step reasoning that produces no distinctive execution feedback, and variants can appear across implementations too different for a single pattern to match. Rece...
Beyond Code Reasoning: A Specification-Anchored Audit Framework for Expert-Augmented Security Verification
Security-critical software is routinely audited by tools that reason about vulnerabilities as repository-local code patterns. Yet specification-governed systems -- protocol stacks, consensus implementations, cryptographic libraries -- are constrained by invariants and correctness conditions defin...
cyber-punk
Cyber Punk Security Vulnerability Scanner A Claude Code plu...
Inside the Fix: Analysis of In-the-Wild Exploit of CVE-2026-21513
Read how PatchDiff-AI uncovered the root cause of CVE-2026-21513 — an actively exploited MSHTML vulnerability — and how APT28 leveraged it in real-world attacks...
Exploit for CVE-2025-12197
Security Research This repository contains my security resea...
Patch Wednesday: Root Cause Analysis with LLMs
...
Inside the Fix: AI-Powered Root Cause Analysis of CVE-2025-60719
...
LLM-Based Vulnerability Discovery through the Lens of Code Metrics
Large language models LLMs excel in many tasks of software engineering, yet progress in leveraging them for vulnerability discovery has stalled in recent years. To understand this phenomenon, we investigate LLMs through the lens of classic code metrics. Surprisingly, we find that a classifier...
InfoFlood: Jailbreaking Large Language Models with Information Overload
Large Language Models LLMs have demonstrated remarkable capabilities across various domains. However, their potential to generate harmful responses has raised significant societal and regulatory concerns, especially when manipulated by adversarial techniques known as "jailbreak" attacks. Existing...
Mono: Is Your "Clean" Vulnerability Dataset Really Solvable? Exposing and Trapping Undecidable Patches and Beyond
The quantity and quality of vulnerability datasets are essential for developing deep learning solutions to vulnerability-related tasks. Due to the limited availability of vulnerabilities, a common approach to building such datasets is analyzing security patches in source code. However, existing...
Abnormal Asset Behavior Detected (Medium)
This asset behavior is an anomaly that needs to be verified for the root cause. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503203;...
OpDiffer: LLM-Assisted Opcode-Level Differential Testing of Ethereum Virtual Machine
As Ethereum continues to thrive, the Ethereum Virtual Machine EVM has become the cornerstone powering tens of millions of active smart contracts. Intuitively, security issues in EVMs could lead to inconsistent behaviors among smart contracts or even denial-of-service of the entire blockchain...