Image de couverture de livre

Eradicating the Unseen: Detecting, Exploiting, and Remediating a Path Traversal Vulnerability across GitHub

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Akhoundali, Jafar, Hamidi, Hamidreza, Rietveld, Kristian, Gadyatskaya, Olga
Format:	Preprint
Publié:	2025
Sujets:	Cryptography and Security
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions
par: Wang, Shenao, et autres
Publié: (2026)

Is GitHub's Copilot as Bad as Humans at Introducing Vulnerabilities in Code?
par: Asare, Owura, et autres
Publié: (2022)

Security Vulnerabilities in AI-Generated Code: A Large-Scale Analysis of Public GitHub Repositories
par: Schreiber, Maximilian, et autres
Publié: (2025)

Granite: Granular Runtime Enforcement for GitHub Actions Permissions
par: Moazen, Mojtaba, et autres
Publié: (2025)

Automating the Detection of Code Vulnerabilities by Analyzing GitHub Issues
par: Cipollone, Daniele, et autres
Publié: (2025)

Unpacking Security Scanners for GitHub Actions Workflows
par: Fares, Madjda, et autres
Publié: (2026)

On the effectiveness of Large Language Models for GitHub Workflows
par: Zhang, Xinyu, et autres
Publié: (2024)

LLM-Enabled Open-Source Systems in the Wild: An Empirical Study of Vulnerabilities in GitHub Security Advisories
par: Shifat, Fariha Tanjim, et autres
Publié: (2026)

Characterizing and Modeling the GitHub Security Advisories Review Pipeline
par: Segal, Claudio, et autres
Publié: (2026)

Exploring User Privacy Awareness on GitHub: An Empirical Study
par: Alfieri, Costanza, et autres
Publié: (2024)

Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows
par: Ruan, Bonan, et autres
Publié: (2026)

Can Highlighting Help GitHub Maintainers Track Security Fixes?
par: Liu, Xueqing, et autres
Publié: (2024)

Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study
par: Fu, Yujia, et autres
Publié: (2023)

Unveiling A Hidden Risk: Exposing Educational but Malicious Repositories in GitHub
par: Masud, Md Rayhanul, et autres
Publié: (2024)

Attack Tree Distance: a practical examination of tree difference measurement within cyber security
par: Schiele, Nathan D., et autres
Publié: (2025)

On the Prevalence and Usage of Commit Signing on GitHub: A Longitudinal and Cross-Domain Study
par: Sharma, Anupam, et autres
Publié: (2025)

Security in the Age of AI Teammates: An Empirical Study of Agentic Pull Requests on GitHub
par: Siddiq, Mohammed Latif, et autres
Publié: (2026)

A limited technical background is sufficient for attack-defense tree acceptability
par: Schiele, Nathan Daniel, et autres
Publié: (2025)

Empirical assessment of the perception of graphical threat model acceptability
par: Schiele, Nathan D., et autres
Publié: (2025)

IssueGuard: Real-Time Secret Leak Prevention Tool for GitHub Issue Reports
par: Rahman, Md Nafiu, et autres
Publié: (2026)

Privacy in ERP Systems: Behavioral Models of Developers and Consultants
par: Pang, Alicia, et autres
Publié: (2026)

Bugdar: AI-Augmented Secure Code Review for GitHub Pull Requests
par: Naulty, John, et autres
Publié: (2025)

Six Million (Suspected) Fake Stars in GitHub: A Growing Spiral of Popularity Contests, Spams, and Malware
par: He, Hao, et autres
Publié: (2024)

Enhancing Security of AI-Based Code Synthesis with GitHub Copilot via Cheap and Efficient Prompt-Engineering
par: Res, Jakub, et autres
Publié: (2024)

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages
par: Ghosh, Rajdeep, et autres
Publié: (2025)

Security Concerns in Generative AI Coding Assistants: Insights from Online Discussions on GitHub Copilot
par: Ferreyra, Nicolás E. Díaz, et autres
Publié: (2026)

Exploiting Cross-Layer Vulnerabilities: Off-Path Attacks on the TCP/IP Protocol Suite
par: Feng, Xuewei, et autres
Publié: (2024)

VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers
par: Sun, Pengyu, et autres
Publié: (2026)

VADER: A Human-Evaluated Benchmark for Vulnerability Assessment, Detection, Explanation, and Remediation
par: Liu, Ethan TS., et autres
Publié: (2025)

Path-wise Vulnerability Mitigation
par: Huang, Zhen, et autres
Publié: (2024)

TaintSentinel: Path-Level Randomness Vulnerability Detection for Ethereum Smart Contracts
par: Rezaei, Hadis, et autres
Publié: (2025)

Profile of Vulnerability Remediations in Dependencies Using Graph Analysis
par: Vera, Fernando, et autres
Publié: (2024)

HALURust: Exploiting Hallucinations of Large Language Models to Detect Vulnerabilities in Rust
par: Luo, Yu, et autres
Publié: (2025)

IoT and Man-in-the-Middle Attacks
par: Fereidouni, Hamidreza, et autres
Publié: (2023)

Breaking Precision Time: OS Vulnerability Exploits Against IEEE 1588
par: Soomro, Muhammad Abdullah, et autres
Publié: (2025)

When RSA Fails: Exploiting Prime Selection Vulnerabilities in Public Key Cryptography
par: Nikzad, Murtaza, et autres
Publié: (2025)

When Safe Models Merge into Danger: Exploiting Latent Vulnerabilities in LLM Fusion
par: Li, Jiaqing, et autres
Publié: (2026)

Seeing the Unseen: Rethinking Illicit Promotion Detection with In-Context Learning
par: Wu, Sangyi, et autres
Publié: (2026)

When Safety Becomes a Vulnerability: Exploiting LLM Alignment Homogeneity for Transferable Blocking in RAG
par: Li, Junchen, et autres
Publié: (2026)

Automated generation of attack trees with optimal shape and labelling
par: Gadyatskaya, Olga, et autres
Publié: (2023)