2026-07-27T09:35:41Z https://nostr.ae GitHub Security Lab https://nostr.ae/npub1p3vejjq7hv2xzyaep8fslldw5murgn8lfahyegp5ev8t7d9few2qqur8jg https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/287/682/946/591/880/original/be5f23331ebe9143.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/287/682/946/591/880/original/be5f23331ebe9143.png https://nostr.ae/nevent1qqsyd7ag5cfps87ly03gyu0xlkwyuf8vwsh0u63wk5jv7rrega5gnyqzyqx9nx2gr6a3gcgnhyyaxrla46n0sdzvla8kun9qxn9sa0e5489egnz69lm Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip &lt;= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. Read more at <a href="https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/">https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/</a><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/647/726/654/108/998/original/58f55c0a4db3bb17.mp4"></video><br/> 2026-05-27T17:31:29Z https://nostr.ae/nevent1qqsqwpzaf0022pkwzhqterxw6qx6gjnhmp6mdtk2nxwa2nu2d0um9fczyqx9nx2gr6a3gcgnhyyaxrla46n0sdzvla8kun9qxn9sa0e5489egfeq0y4 Learn why some vulnerabilities resist to fuzzing and persist in long-enrolled OSS-Fuzz projects, and how you can find them!<br/><br/><a href="https://github.blog/security/vulnerability-research/bugs-that-survive-the-heat-of-continuous-fuzzing/">https://github.blog/security/vulnerability-research/bugs-that-survive-the-heat-of-continuous-fuzzing/</a><br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/807/671/946/648/986/original/e6b97148503fd187.png"> <br/> 2025-12-30T08:58:30Z https://nostr.ae/nevent1qqst6pp6vna6694v987s5ff0ysndpmlnx2l03qpu4c9z0y48nnughtqzyqx9nx2gr6a3gcgnhyyaxrla46n0sdzvla8kun9qxn9sa0e5489egefgzsy Here are our June bug bounty stats!<br/>✅ 120 bounty reports submitted<br/>👥 103 hackers participated in our program<br/>💰 Awarded $43,651 in bounties<br/><br/>Found a vulnerability? Submit it here: <a href="https://bounty.github.com">https://bounty.github.com</a> 2025-07-02T00:24:11Z https://nostr.ae/nevent1qqsg7a60ushvhjhpllyjnq3ntmpj2j4f8ny7vsmh8pz6dr4ejreahqqzyqx9nx2gr6a3gcgnhyyaxrla46n0sdzvla8kun9qxn9sa0e5489eg283pll Open source maintainers, did you receive your first vulnerability report? Don&#39;t panic! Handling vulnerability reports doesn’t have to be stressful. Read on to find out how you can tackle security issues efficiently and confidently with the right tools and approach. <a href="https://github.blog/security/vulnerability-research/a-maintainers-guide-to-vulnerability-disclosure-github-tools-to-make-it-simple/">https://github.blog/security/vulnerability-research/a-maintainers-guide-to-vulnerability-disclosure-github-tools-to-make-it-simple/</a> 2025-03-24T17:48:34Z