7904 matches found
From Regression to Prior-Aware Inference: Solving the ILWE Family in Randomness Leakage Attacks against ML-DSA
ML-DSA is a representative lattice-based signature scheme standardized by NIST. It relies on signing randomness and rejection sampling to ensure that released signatures are statistically independent of the secret key. Practical implementations, however, may leak partial information about this...
Parser Observer for Safe DNG SDK Input Validation / Runtime Monitoring
This C++ utility provides a minimal parser-observation framework for examining how the Adobe DNG SDK handles DNG file inputs while minimizing direct interaction with deeper image-processing stages...
When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems
While enabling effective collaboration on complex tasks, LLM-based Multi-Agent Systems MAS face critical security challenges due to vulnerabilities at the agent and interaction levels. Most existing MAS security defenses are built upon two core assumptions: semantically-explicit malicious attacks...
QUBO Modeling of Module Learning with Errors: Stability and Scaling in Post-Quantum Cryptography
Lattice-based post-quantum cryptography relies on the hardness of the Learning With Errors LWE and Module Learning With Errors MLWE problems. This work introduces a constructive framework for encoding small MLWE instances as Quadratic Unconstrained Binary Optimization QUBO models suitable for...
MSCENet: A Multi-Scale Correlation Enhanced Network for Anomaly Detection
In the field of multivariate time series anomaly detection, against the backdrop of increasing data complexity and complex dependencies across multiple temporal scales, traditional methods often struggle to simultaneously capture temporal dynamic features and intricate inter-series correlations. ...
SA-DRL: Security-Aware Deep Reinforcement Learning for Ransomware Detection with Asymmetric Reward Design
Ransomware detection is a security-critical task in which false negatives and false positives have unequal operational consequences. Conventional machine learning detectors often use symmetric objectives that penalize missed ransomware detections and benign false alarms equally, although a false...
REFORGE: A Method for Benchmarking LLMs' Reverse Engineering Capabilities in Decompiled Binary Function Naming
Large language models LLMs are increasingly applied to reverse-engineering tasks, and recent threat-intelligence reporting shows them operating inside live offensive-security workflows. Claims about their capability, however, outpace our ability to measure it. Existing benchmarks for LLM-assisted...
Packed Bitmap Validation Utility for Detecting Pitch Mismatches and Memory-Safety Risks
This C program implements a lightweight validation utility for identifying structural inconsistencies in packed bitmap formats by analyzing relationships between image width, pitch, and bits-per-pixel representations...
SafeLine SL6 / SL6+ Authentication Bypass
The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy BLE interface...
PackageKit Evidence-Based Exposure Assessment Tool
This script is a defensive assessment utility designed to evaluate potential exposure around PackageKit deployments using observable system evidence rather than assumptions or exploitation attempts...
Zeek 8.0.9
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
ProvICS: A Provenance-Based Intrusion Detection for Industrial Control Systems
The convergence of Information Technology and Operational Technology has exposed Industrial Control Systems ICS to multi-stage cyberattacks that traverse software, network, and physical process layers simultaneously. Although Provenance-based Intrusion Detection Systems PIDS are effective in...
Bit2Watt: A Cyber-Physical Vulnerability Exploiting GPU Workloads across Power and Computing Infrastructures
Modern data centers increasingly rely on large-scale GPU clusters and on-site renewable energy resources, resulting in a tightly coupled cyber-physical system between computing workloads and power-electronic-dominated grids. In this paper, we reveal Bit2Watt, a previously unexplored vulnerability...
Palo Alto Networks PAN-OS GlobalProtect Authentication Bypass Metasploit Scanner
This Metasploit auxiliary module scans for a potential authentication bypass vulnerability in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway services...
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents
Persistent personal agents combine long-term memory with access to users' external environments, enabling personalized foreground assistance and proactive background execution. This integration also creates a new path to compromise: untrusted external content can be silently written into persiste...
Nuclei 3.11.0
Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...
LifeOS 6.0.5
LifeOS is a Life Operating System. It knows your goals, the people who matter to you, and where you are right now, and it works to move you toward where you want to be. The engine underneath is a verifiable loop: turn any request into testable criteria, then climb until they pass. This is the fir...
Strapi CMS 5.36.1 Security Misconfiguration Detection Scanner
This is a scanner designed to identify potential security misconfigurations in Strapi CMS instances without performing exploitation or data extraction...
The Cathedral and the Bazaar of Software Vulnerabilities: From the NVD to the CNAs
For decades, the National Vulnerability Database NVD, the "Cathedral", has been the reference source for vulnerability information for downstream research and industry tasks, e.g., software update prioritization. An emerging "Bazaar" of diverse CVE Numbering Authorities CNAs has created many...
Agent Data Injection Attacks Are Realistic Threats to AI Agents
AI agents act on behalf of user prompts, consuming external data and taking actions based on the agent context. Prior research on AI agent security has primarily focused on indirect prompt injection IPI. Its most well-studied category is instruction injection, where attacker-controlled untrusted...
Blockchain Attacks and Defenses: A Layered and Cross-Domain Survey
Blockchains have evolved from simple distributed ledgers into programmable platforms that process complex application logic and carry significant financial value. All modern Web3 systems share a common goal: providing secure, decentralized, and trustworthy execution in an increasingly...
Slate Digital Connect 1.37.0 Security Scanner
This Python script is a local security scanner designed to detect potential exposure related to Slate Digital Connect and its components associated with CVE-2026-24066 and CVE-2026-24067...
TACTIC-KG: Toward Small Agent Teams for Cyber Threat Intelligence Knowledge Graph Construction
Cyber Threat Intelligence CTI reports are predominantly unstructured, heterogeneous, and noisy, which limits their direct usability for automated analysis and reasoning. Cybersecurity Knowledge Graphs CSKGs provide a structured representation of adversarial entities, actions, and relations, but...
Measuring Healthcare Data Leaks and Security Flaws at Internet Scale
Systems that process medical data should be meticulously secured. Yet, network services in healthcare environments often fail to implement basic security measures. For example, previous studies showed that network segmentation flaws led to DICOM systems leaking millions of patient records. In...
Tenda HG7 / HG9 / HG10 Management Interface Assessment Module
This refactored Metasploit module shifts from denial of service testing toward defensive exposure assessment and configuration review. Rather than attempting exploitation or service disruption, it focuses on identifying exposed interfaces, weak configuration indicators, and improving visibility...
Untrusted Content Masking for Web Agents with Security Guarantees
Defenses that provide security guarantees against prompt injection attacks rely on strict isolation between trusted instructions and untrusted data. In text-based environments such as tool-use APIs, this separation arises naturally: agents can reason from interface definitions without ever...
RustMizan: A Compilable, Contamination-Aware Benchmarking Framework for Rust Vulnerabilities
LLM agents are increasingly applied to vulnerability analysis, but existing benchmarks have not kept pace. They typically rely on small non-compilable snippets, focus on binary classification vulnerable or not, and do not account for the risk that publicly-released datasets are part of model...
WPProbe Plugin Enumeration Tool 0.12.4
A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...
Strapi Content API Sanitization Bypass Detection Module Scanner
This Python script assesses exposure to CVE-2026-27886 in Strapi Content API endpoints by performing differential filter validation against where parameters. Detection compares baseline query behavior against controlledfilter predicates to determine whether unsanitized conditions reach backend...
F-ACVAE: A Federated Adaptive Conditional Variational Auto-Encoder for Privacy-Preserving Intrusion Detection in IoT Networks
The rapid proliferation of Internet of things IoT devices has significantly expanded the cyber-attack surface, necessitating robust and privacy-preserving intrusion detection systems IDS. However, centralized learning approaches often suffer from severe performance degradation due to...
OpenSSH 10.4p1
OpenSSH is the premier connectivity tool for remote login with the SSH protocol. It encrypts all traffic to eliminate eavesdropping, connection hijacking, and other attacks. In addition, OpenSSH provides a large suite of secure tunneling capabilities, several authentication methods, and...
Detecting Vulnerability-Inducing Commits Via Multi-Stage Reasoning with LLM-Based Agents
Detecting vulnerability-inducing commits VICs at submission time is critical for improving the security and reliability of software systems. However, this task is highly challenging because it requires reasoning about the semantic impact of code changes from heterogeneous information sources,...
Joern 4.0.575
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Ghost Traffic: ICMP Tunneling-Based Billing Bypass in LTE Networks
Cellular data billing is a core operational mechanism for mobile Internet service providers ISPs, and a policy gap that excludes a specific protocol from usage accounting can lead to a practical security threat. Some cellular ISPs treat ICMP echo traffic as control traffic rather than user data a...
SAP NetWeaver SAML Endpoint Exposure Scanner Tool for Metadata Discovery
This Python script is a defensive security scanner designed to identify exposed SAML-related endpoints on SAP NetWeaver systems SAPBASIS versions 700–918...
HilEnT: Hilbert, Entropy Transformed Image Based Malware Detection
With the increasing threat of malware across various software related domains, malware detection and classification is critical to determine the response actions. Different strategies have been adopted to address the challenge of malware detection. With the advent of deep learning techniques,...
Security Analysis of RIS-Assisted Physical-Layer Authentication over Multipath Channels
In physical layer authentication, verification of a user's identity is based on the characteristics of the transmission channel through which signals are delivered to the authenticator Bob. In this paper, we assume that the signals received by Bob pass through a \acRIS controlled by Bob and that...
Maestro 0.17.3
Maestro is a cross-platform desktop app for orchestrating your fleet of AI agents and projects. It's a high-velocity solution for hackers who are juggling multiple projects in parallel. Designed for power users who live on the keyboard and rarely touch the mouse. Collaborate with AI to create...
ShadowProbe: Language-Extensible Detection of Hidden Algorithmic Complexity Vulnerabilities
Algorithmic Complexity Vulnerabilities ACVs arise when adversarial inputs trigger worst-case execution behavior, causing severe performance degradation or Denial-of-Service conditions. A key but underexplored source is shadow complexity: non-trivial computational costs hidden inside seemingly...
Security of Quantum Conference Key Agreement with Two-Way Classical Communication
Quantum conference key agreement QCKA enables multiple users to establish a common secret key with information-theoretic security and is regarded as a key primitive for secure communication in future quantum networks. However, practical implementations of QCKA typically suffer from higher noise...
Piercing Gilbreath'S Conjecture: From Deep Number Theory Insights to Fintech and Cybersecurity
I propose a new methodology to attack the fascinating Gilbreath's conjecture about prime numbers, first posted in 1878 and unsolved to this day. The problem statement is rudimentary: kids can understand it. However, despite decades of research, almost no progress has been made. This paper changes...
Agentic SABRE: An Uncertainty-Aware Neuro-Symbolic Multi-Agent Framework for Adaptive Ransomware Detection
Ransomware has evolved into a complex, adaptive, and fast-moving adversary category in which static signatures and monolithic classifiers fail to generalise under concept drift, evasion, and behavioural polymorphism. In this paper, we present Agentic SABRE Semantic-Behavioural Arbitration for...
Mean Time to Remediate Is Not a Fielding Model: A Cadence Audit for Enterprise Vulnerability Management
Enterprise security teams commonly summarize remediation through mean time to remediate MTTR, SLA compliance, dwell time, or detection delay. These metrics are useful, but they can hide how fixes actually reach the estate: continuously, through scheduled maintenance windows, in deployment rings, ...
Let My Data Go: Data Brokers' Compliance with Opt-Out and Deletion Requests
Data brokers are a largely American phenomenon. They collect vast amounts of personal information about most adult U.S. consumers, mainly without the latter's knowledge or consent. Accumulated data can be sold to anyone, including employers, landlords, insurance agencies, banks, governments local...
Securing Deep Learning Hardware: A Survey of Side-Channel Vulnerabilities and Countermeasures
As deep learning models are increasingly deployed in critical sectors such as healthcare, finance, and security, ensuring their protection against emerging threats has become crucial. Among these threats, side-channel attacks SCAs represent a particular challenge since they can extract sensitive...
Advanced Topic Modeling Techniques for Categorizing Software Vulnerabilities
The increasing complexity and frequency of software vulnerabilities demand efficient methods to analyze and prioritize threats. Traditional approaches often fail to process the vast amount of unstructured textual data effectively, highlighting the need for advanced solutions. This study leverages...
Conductance-Repair Evidence Graphs for Prospective Security Retrieval
Security retrieval is often evaluated as ranking over complete evidence, but operational triage is prospective: CVE descriptions, weakness metadata, fix commits, EPSS scores, KEV membership, validation-vector metadata, and side-channel benchmark routes arrive through separate channels, and many a...
Overloading Large Vision-Language Models for Jailbreaking
Large Vision-Language Models LVLMs exhibit remarkable vision-language capabilities and are increasingly deployed in real-world applications such as personal assistants, document analysis systems, and embodied agents. However, their dual-modal attack surfaces make them vulnerable to jailbreak...
Whistleblowersoftware.com Confidentiality Fail
The anonymous reporting flow on whistleblowersoftware.com encrypts report text end-to-end in the browser but does not extend the same guarantee to attachments and exposes the reporter's network identity and timing to a US-based third party. Together these weaken the confidentiality and anonymity...