4 casos · pág. 1/1
Hacktron tested eight LLMs, open-weight and frontier, in its fixed pentest and code-review orchestration. The target was Fider, an open-source Go and React feedback app. The test measured how many of 15 vulnerabilities patched between v0.33.0 and v0.36.1 (originally reported by XBOW and Aikido) each model could rediscover. The patches pos…
Aikido published a vendor blog post arguing that SCA reachability analysis is not enough for prioritizing dependency vulnerabilities. Reachability shows whether code can execute a vulnerable function. Exploitability asks whether an attacker can satisfy the conditions the bug needs. The article uses lodash .template command injection (CVE-…
Hacktron published a vendor blog post comparing its AI pentesting platform against XBOW and Aikido, using the benchmark target from a Doyensec head-to-head report (sponsored by Aikido). Doyensec scanned the open-source projects Fider and Photoview at $4,000 per repo per platform. The author ran Hacktron on Fider v0.33.0, at an estimated c…
The PHP security team released emergency fixes on October 21, 2026 at 14:00 UTC for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials a…
