ProFuzzBench is a benchmark for stateful fuzzing of network protocols. It includes a suite of representative open-source network servers for popular protocols (e.g., TLS, SSH, SMTP, FTP, SIP), and ...

Abstract: Code reuse in software development frequently facilitates the spread of vulnerabilities, making the scope of affected software in CVE reports imprecise. Traditional methods primarily focus ...

Fuzzing with Code Fragments Christian Holler, Mozilla Corporation; Kim Herzig and Andreas Zeller, Saarland University Fuzz testing is an automated technique providing random data as input to a ...

For example, the following demo shows how to fuzz a GUI application using EnvFuzz: [Demo of EnvFuzz fuzzing a GUI application binary (gnome-calculator). First, the app is run normally, and all ...

Abstract: Fuzzing is a popular and effective software testing technique that automatically generates or modifies inputs to test the stability and vulnerabilities of a software system, which has been ...

This paper introduces FlowFusion, the first automatic fuzzing framework to detect memory errors in the PHP interpreter. FlowFusion leverages dataflow as an efficient representation of test cases ...

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities ...

An anonymous researcher has dumped what they say is working exploit code for zero-day vulnerabilities across 15 software ...

Google released a Chrome update addressing 382 security bugs, including sandbox-escape risks. Users and IT teams should ...

OpenAI has deployed GPT-5.5-Cyber to execute automated open-source vulnerability remediation alongside security firm Trail of ...

Speaking of Codex: OpenAI on Monday released a Codex Security plugin⁠ that the company says “enables out-of-the-box defensive ...