Copertina

Bringing UFUs Back into the Air With FUEL: A Framework for Evaluating the Effectiveness of Unrestricted File Upload Vulnerability Scanners

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autori principali:	Neef, Sebastian, Oudeh, Maath
Natura:	Preprint
Pubblicazione:	2024
Soggetti:	Cryptography and Security
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

What All the PHUZZ Is About: A Coverage-guided Fuzzer for Finding Vulnerabilities in PHP Web Applications
di: Neef, Sebastian, et al.
Pubblicazione: (2024)

Effective Universal Unrestricted Adversarial Attacks using a MOE Approach
di: Baia, A. E., et al.
Pubblicazione: (2021)

A Practical Solution to Systematically Monitor Inconsistencies in SBOM-based Vulnerability Scanners
di: Rosso, Martin, et al.
Pubblicazione: (2025)

Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis
di: Brokman, Jonathan, et al.
Pubblicazione: (2024)

Layered Uploading for Quantum Convolutional Neural Networks
di: Barrué, Grégoire, et al.
Pubblicazione: (2024)

When Scanners Lie: Evaluator Instability in LLM Red-Teaming
di: Erez, Lidor, et al.
Pubblicazione: (2026)

A Time Series Analysis of Malware Uploads to Programming Language Ecosystems
di: Ruohonen, Jukka, et al.
Pubblicazione: (2025)

Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks
di: Schmotz, David, et al.
Pubblicazione: (2026)

AndroScanner: Automated Backend Vulnerability Detection for Android Applications
di: Dandu, Harini
Pubblicazione: (2026)

Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior
di: Lian, Zhuotao, et al.
Pubblicazione: (2025)

MoveScanner: Analysis of Security Risks of Move Smart Contracts
di: Luo, Yuhe, et al.
Pubblicazione: (2025)

Assessing the Effectiveness of LLMs in Android Application Vulnerability Analysis
di: Kouliaridis, Vasileios, et al.
Pubblicazione: (2024)

SoK: Towards Effective Automated Vulnerability Repair
di: Li, Ying, et al.
Pubblicazione: (2025)

Vulnerability Mitigation System (VMS): LLM Agent and Evaluation Framework for Autonomous Penetration Testing
di: Abdulzada, Farzana
Pubblicazione: (2025)

Establishing Minimum Elements for Effective Vulnerability Management in AI Software
di: Fazelnia, Mohamad, et al.
Pubblicazione: (2024)

LLMs Cannot Reliably Identify and Reason About Security Vulnerabilities (Yet?): A Comprehensive Evaluation, Framework, and Benchmarks
di: Ullah, Saad, et al.
Pubblicazione: (2023)

AirCatch: Effectively tracing advanced tag-based trackers
di: Mishra, Abhishek Kumar, et al.
Pubblicazione: (2026)

On the Effectiveness of Function-Level Vulnerability Detectors for Inter-Procedural Vulnerabilities
di: Li, Zhen, et al.
Pubblicazione: (2024)

NICE: A Framework for Declarative and Machine-Checkable Vulnerability Reproduction
di: Nguyen, Minh-Luân, et al.
Pubblicazione: (2026)

Towards Immutability: A Secure and Efficient Auditing Framework for Cloud Supporting Data Integrity and File Version Control
di: Bappy, Faisal Haque, et al.
Pubblicazione: (2023)

Bringing Rust to Safety-Critical Systems in Space
di: Seidel, Lukas, et al.
Pubblicazione: (2024)

Bringing Forensic Readiness to Modern Computer Firmware
di: Latzo, Tobias, et al.
Pubblicazione: (2025)

Evaluating the Vulnerability Landscape of LLM-Generated Smart Contracts
di: Do, Hoang Long, et al.
Pubblicazione: (2026)

Zer0n: An AI-Assisted Vulnerability Discovery and Blockchain-Backed Integrity Framework
di: Parmar, Harshil, et al.
Pubblicazione: (2026)

Gas Gauge: A Security Analysis Tool for Smart Contract Out-of-Gas Vulnerabilities
di: Nassirzadeh, Behkish, et al.
Pubblicazione: (2021)

QuiLL: An LLM-Based Vulnerability Assessment Framework for the Wild
di: Safdar, Rijha, et al.
Pubblicazione: (2025)

Supply Chain Insecurity: Exposing Vulnerabilities in iOS Dependency Management Systems
di: Schmidt, David, et al.
Pubblicazione: (2026)

Prompting the Priorities: A First Look at Evaluating LLMs for Vulnerability Triage and Prioritization
di: Haddad, Osama Al, et al.
Pubblicazione: (2025)

Evaluating Vulnerability of Chiplet-Based Systems to Contactless Probing Techniques
di: Deric, Aleksa, et al.
Pubblicazione: (2024)

Evaluating and Enhancing the Vulnerability Reasoning Capabilities of Large Language Models
di: Lu, Li, et al.
Pubblicazione: (2026)

FuncVul: An Effective Function Level Vulnerability Detection Model using LLM and Code Chunk
di: Halder, Sajal, et al.
Pubblicazione: (2025)

Unpacking Security Scanners for GitHub Actions Workflows
di: Fares, Madjda, et al.
Pubblicazione: (2026)

Unpacking .zip: A First Look at Domain and File Name Confusion
di: Despotovic, Predrag, et al.
Pubblicazione: (2026)

Intermittent File Encryption in Ransomware: Measurement, Modeling, and Detection
di: Ineza, Ynes, et al.
Pubblicazione: (2025)

Padding Matters -- Exploring Function Detection in PE Files
di: Springer, Raphael, et al.
Pubblicazione: (2025)

Vulnerability Management Chaining: An Integrated Framework for Efficient Cybersecurity Risk Prioritization
di: Shimizu, Naoyuki, et al.
Pubblicazione: (2025)

FileDES: A Secure Scalable and Succinct Decentralized Encrypted Storage Network
di: Xu, Minghui, et al.
Pubblicazione: (2024)

Designing a Secure Device-to-Device File Transfer Mechanism
di: Rahalkar, Chaitanya, et al.
Pubblicazione: (2024)

LLM-BSCVM: An LLM-Based Blockchain Smart Contract Vulnerability Management Framework
di: Jin, Yanli, et al.
Pubblicazione: (2025)

AutoPatch: Multi-Agent Framework for Patching Real-World CVE Vulnerabilities
di: Seo, Minjae, et al.
Pubblicazione: (2025)