生成文件与压缩文件自动分类增强。 自动分类(automatic classification)用于将自动生成的代码和压缩后的代码(minified files)从普通源码中区分开来,避免对其产生噪声告警。本版本特别改善了 Doxygen 生成文件的识别——Doxygen 常用于从 C/C++ 头文件生成文档,但偶尔也会被用于生成 JavaScript 绑定代码 ...
A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a ...
An end-to-end pipeline that watches NVD and GitHub Advisory feeds for new CVEs, classifies the vulnerability, runs live exploit probes, generates bypass analysis, and writes runnable PoC exploit ...
A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors are likely ...