traekfuglene

3 ms·

1. 1.▲
   by traekfuglene 5mo ago

   Striga ( https://www.striga.ai/ ) - Source code auditing built on artificial intelligence. Auditing source code with local LLMs, ensuring full data sovereignty. The latest noteworthy discovery - Double Free and possible RCE v
2. 2.▲
   CSRF and LDAP injection found and fixed in pac4j security framework(pac4j.org)

   2 points by traekfuglene 7mo ago|0 comments
3. 3.▲
   Exploiting a 32-year-old buffer overflow in GNU telnetd (CVE-2026-32746)(striga.ai)

   7 points by traekfuglene 7mo ago|1 comments
4. 4.▲
   by traekfuglene 7mo ago

   Pre-auth buffer overflow in telnetd's SLC handler, sitting in the codebase since 1994. We used Striga, our AI-driven source code auditing platform, to reproduce the exploitation path and work out the byte constraints. The writeup cover
5. 5.▲
   Taking Down the Internet's Most Popular HTTP Client with a Single JSON Key(striga.ai)

   10 points by traekfuglene 7mo ago|1 comments
6. 6.▲
   by traekfuglene 7mo ago

   We used Striga to discover a high-severity vulnerability in axios, the most downloaded HTTP client in JavaScript. Any Node.js service that forwards user-controlled JSON through axios can be crashed with a single request. CVE-2026-25639. Pat