CakeFuzzer

CakeFuzzer Latest release : 1.0 License : GNU GPL v3.0 Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives. Currently it is implemented to support the Cake...

CVE-2024-31497

-CVE-2024-31497 Un script diseñado para descubrir vulnerabilidades en Putty explotando CVE-2024-31497...

SockFuzzer

SockFuzzer: Marco de Fuzzing del Kernel XNU Estado del Proyecto SockFuzzer, diseñado originalmente como un fuzzer centrado en redes para el kernel XNU utilizado en macOS e iOS, ha evolucionado hasta convertirse en un marco integral de fuzzing del kernel. Aunque conserva su nombre original como...

fuzzing-templates

Plantillas de Fuzzing Lista curada por la comunidad de plantillas de fuzzing para el motor nuclei para encontrar vulnerabilidades de seguridad desconocidas. Documentación • Contribuciones • Discusión • Comunidad !Caution Este repositorio está archivado y fusionado en el proyecto nuclei-templates...

patch-diffing-in-the-dark

Diffing de Parches en la Oscuridad Una serie de publicaciones de blog que aprovechan el análisis de CVE y el diffing de parches para descubrir nuevas vulnerabilidades. Como se revela en las publicaciones del blog, 4 CVEs surgieron del estudio en profundidad de CVE-2021-1657. Índice Resultados de...

bunch-of-fuzzers-developed-using-libfuzzer-and-asan

bunch-of-fuzzers-developed-using-libfuzzer-and-asan...

nl-kat-coordination

================ What is OpenKAT? OpenKAT aims to monitor, record and analyze the status of information systems. The basic premise is that many of the major security incidents are caused by small errors and known vulnerabilities, and if you find them and resolve them in time your systems and...

ansible-cve-2023-36845

ansible-cve-2023-36845 Playbook de Ansible simple y sin probar para descubrir el posible CVE-2023-36845. ansible-playbook -i inventory cve-2023-36845.yml Usa el ansible.cfg para limitar la salida y evitar que se muestren los hosts omitidos...

LibPNG_OSS-Fuzz

Fuzzing and Vulnerability Analysis of libpng Group Security Research Project About Fuzzing: Fuzzing is an automated software testing technique that provides invalid, unexpected, or random data as inputs to a program to discover bugs and vulnerabilities. Coverage-guided fuzzing uses code coverage...

I Want Better Reporting on AI Genie Behavior

AI systems are regularly completing tasks in ways that their prompters don't want or intend. Some of them are disturbing, and some of them are dangerous. This is something I've been calling "genie behavior," because I think that really gets at the core of what's happening. I wish the popular pres...

opensource_defect_repare_cc

Requisitos Detección y corrección de vulnerabilidades En el proyecto, el repositorio de código en el directorio code contiene varias vulnerabilidades conocidas. Debes reescribir el módulo central del proyecto la interfaz permanece completamente igual, la implementación cambia, la similitud antes ...

ethibench

From Controlled to the Wild: Evaluation of Pentesting Agents in the Real-World AI pentesting agents are increasingly credible as offensive security systems, but current benchmarks still provide limited guidance on which systems will perform best on real-world targets. Most existing evaluations...

agent-scan v0.6.1

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: We don't publish an npm package for Agent Scan. Install it via uvx or as a standalone binary. Note: CLI output is experimental and subject to...

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program. "The Fairwind Program gives high-priority defenders like governments,...

PT-2026-81209

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs read reply function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the...

WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by winky in WordPress Plugin WPJAM Basic versions = 7.0.2.1...

📄 Ghost CMS 6.19.0 Remote Code Execution

This Metasploit module exploits a remote code execution vulnerability in Ghost CMS. Specifically crafted malicious themes can execute arbitrary code on the server running Ghost. The affected versions include all releases from 0.7.2 up to and including 6.19.0. For versions 5.105.0-5.130.5 and...

NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF

NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF vulnerability discovered by ? in WordPress Npm pdfjs-dist versions = 5.6.83, 6.2.108...

CVE-2026-18599

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.setconfig of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument recordsize causes command injection. The exploit has been published...

CVE-2026-56389 Arbitrary Command Execution in GNU Bison

GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...