Vulnerability Research research

98 papers · Research category

Vulnerability research examines how weaknesses are discovered, described and evaluated. Research questions may concern a particular failure mechanism, the information used to identify a weakness or the performance of a discovery method.

Scope of this collection

This bibliography includes papers carrying ALEX’s Vulnerability Research category. Its subject-based membership differs from Vulnerability Assessment, which groups papers assigned to an investigative application. An entry here is a research reference, not a statement that a currently deployed product is vulnerable.

Using this research

Check affected configurations, software versions, disclosure context and the evidence used to demonstrate a weakness. When comparing discovery methods, look at the evaluation corpus and the treatment of false positives. Consult current authoritative product information separately before drawing conclusions about a live system.

References reproduce the metadata held by ALEX. Missing author, year or source details are identified in the listing. Publication years are shown as recorded; collection and retrieval dates are not substituted. Follow the original source to verify a citation.

Bibliography

Showing 1–50 of 98 papers, ordered by publication year (newest first), then title.

Earlier research · five years or older Historical reference

Age markers as of 2026-11-06.

<b>Vulnerability Management Best Practices</b>
Safa Mohamed; Maram Ahamed; Safa Kamal; Safa Mostafa (2026) · Figshare
Paper details
View paper · Open ALEX record
<b>Web Application Security Testing Methodologies</b>
Safa Mohamed; Safa Kamal; Safa Mostafa (2026) · Figshare
Paper details
View paper · Open ALEX record
<scp>Fixseeker</scp> : An Empirical Driven Graph-based Approach for Detecting Silent Vulnerability Fixes in Open Source Software
Yiran Cheng; Ting Zhang; Lwin Khin Shar; Zhe Lang; David Lo; Shichao Lv; Dongliang Fang; Zhiqiang Shi; Limin Sun (2026) · ACM Transactions on Software Engineering and Methodology
Paper details
View paper · Open ALEX record
A HYBRID DETECTION FRAMEWORK FOR SQL INJECTION: REDUCING FALSE POSITIVES THROUGH SIMILARITY-BASED PATTERN MATCHING AND PROACTIVE DEVELOPER INTEGRATION
A. I. Oladipo; F. Adamu-Fika; K. B. Shehu; M. A. Buhari; A. T. Ramalan; U. A. Adeniyi (2026) · Open Journal of Physical Science (ISSN: 2734-2123)
Paper details
View paper · Open ALEX record
A Lightweight Automated SQL Injection Testing Tool with Integrated Discovery and Structured Reporting
Olusanjo Olugbemi Fasola; Ugochukwu Onwudebelu; Ibrahim Ismail; Nancy Chinyere Woods (2026) · European Conference on Cyber Warfare and Security
Paper details
View paper · Open ALEX record
A Machine Learning-Driven Visual Analytics Framework for Cybersecurity Risk Prioritization Using the CISA KEV Catalog
Ahad Anwer; Loubna Ali (2026) · European Modern Studies Journal
Paper details
View paper · Open ALEX record
A Multi-Agent Large Language Model Framework for Autonomous Web Application Penetration Testing
Tapasvi Madhak; Vidhi Desai; Shubham Bholwankar; Jeet Moradiya; Anand Singh Rajput; Mehulkumar Dalwadi (2026) · Springer Science and Business Media LLC
Paper details
View paper · Open ALEX record
A Multi-Agent-Driven Hybrid Digital Twin Framework for Adaptive Cybersecurity Vulnerability Verification in Power Cyber-Physical Systems
Yuantao Wang; Xin Liu; Lianghua Gong; Guohua Gao (2026) · Systems
Paper details
View paper · Open ALEX record
A Novel Ethical Payload Framework for Automated System Vulnerability Detection Using Msfvenom
Abiola O. Akinyemi (2026) · International Journal of Computer Science and Mathematical Theory
Paper details
View paper · Open ALEX record
A novel hybrid cybersecurity assessment methodology for HTTPS deployment
Abdelhadi Zineddine; Yousra Belfaik; Yassine Sadqi; Said Safi (2026) · High-Confidence Computing
Paper details
View paper · Open ALEX record
A Review of Vulnerability Scanner Tools for Network Security
Karan Das (2026) · International Journal for Research in Applied Science and Engineering Technology
Paper details
View paper · Open ALEX record
A Unified Compliance Aggregator Framework for Automated Multi-Tool Security Assessment of Linux Systems
Sheldon Paul; Izzat Alsmadi (2026) · ArXiv.org
Paper details
View paper · Open ALEX record
Advanced Ethical Hacking Techniques and Methodologies: A Comprehensive Study of Penetration Testing in Modern Cybersecurity Frameworks
Navneet Yadav (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
AI-Based Vulnerability Assessment Capability and Cyber Attack Graph Analysis
Joni Herttuainen; Kirsi Hellsten; Vesa Kuikka; Ambrose Kam; Arlanda Johnson; David Welsh; Kimmo K. Kaski (2026) · arXiv (Cornell University)
Paper details
View paper · Open ALEX record · Source page
AIALIB: A Threat Library for AI-Generated Code
Ali Aljaberi; Jian Kang; Youcheng Sun (2026) · Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering
Paper details
View paper · Open ALEX record
An Empirical Investigation of Security Vulnerabilities within Web Applications of Italian Local Health Authorities
Lerina Aversano; Alessandro Caniglia; Stefano Galantucci; Giuseppe Pirlo (2026) · Springer Science and Business Media LLC
Paper details
View paper · Open ALEX record
An Empirical Security Assessment of Android-Based Social Media Applications in Thailand: A Multi-Method Approach Aligned with OWASP Mobile Top 10 (2024)
Chatphat Titiakarawongse; Benjamas Rueangphimai; Chanikan Weangnon (2026) · Studies in Media and Communication
Paper details
View paper · Open ALEX record
An Integrated Framework to Enhance Penetration Testing for ICT Market Applications
Abdulrahman Mohammed Abdulrahman Ahmed Abutaleb (2026) · مجلة جامعة صنعاء للعلوم التطبيقية والتكنولوجيا
Paper details
View paper · Open ALEX record
An Open-Source Framework for Efficient Side-Channel Analysis on Cryptographic Implementations
Takuya Kojima; Masaki Morita; Hideki Takase; Hiroshi Nakamura (2026) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems
Paper details
View paper · Open ALEX record
AN OVERVIEW OF LARGE LANGUAGE MODEL APPROACHES FOR AUTOMATED SOFTWARE VULNERABILITY DETECTION
M Maksymovych (2026) · Computer systems and network
Paper details
View paper · Open ALEX record
ANALISIS KERENTANAN SQLi DAN XSS PADA WEBSITE TOP-UP GAME
Heri Sumantri; Husain; Muhamad Azwar; Raisul Azhar; Khairan Marzuki (2026) · Jurnal Manajemen Informatika dan Sistem Informasi
Paper details
View paper · Open ALEX record
Analog Hardware Trojans: An Overlooked Threat
Ramana Ranganatham; Maksym Melnyk; Michael Zuzak; Tejasvi Das (2026) · IEEE Design and Test
Paper details
View paper · Open ALEX record
Assessing Cyber Vulnerabilities and Defence Strategies in Renewable Energy for Critical Sectors
Moraes Jose; Satya R Shah (2026) · International Journal of Computational and Applied Mathematics & Computer Science
Paper details
View paper · Open ALEX record
Assessing the Cross-Version Applicability of Java Library Vulnerability Exploits
Zirui Chen; Qi Zhan; Jiayuan Zhou; Xing Hu; Xin Xia; Xiaohu Yang (2026) · Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering
Paper details
View paper · Open ALEX record
Benchmarking Generative AI Models for Cybersecurity Vulnerability Identification Using 50 Curated Vulnerability Cases: An Exploratory Single-Pass Comparative Study of ChatGPT, Gemini, and Claude
Emanuel Dungon; Mark Jan Irog; Hans Luther Salva; Julse Lorenz Alvior; Rosa Mae Bascar; Rod Albert Aspera; Serafin Palmares; Kristine Soberano (2026) · International Journal of Transformative Multidisciplinary Studies
Paper details
View paper · Open ALEX record
BEYOND BLACK OCTOBER: AN AI-DRIVEN PREDICTIVE CYBER DEFENSE FRAMEWORK FOR PREVENTING AUTONOMOUS EXPLOITATION OF CRITICAL SOFTWARE VULNERABILITIES
Ashikur Rahman (2026) · International Journal of Engineering Technology Research & Management
Paper details
View paper · Open ALEX record
Business Analytics for Cybersecurity Vulnerability Prioritization in Banking: Evidence from EPSS, CVSS, and CISA KEV
Raguvaran V (2026) · Journal of Progressive Engineering Studies
Paper details
View paper · Open ALEX record
Comparing PPO and GRPO for Automated Penetration Testing with Compact Language Models on Consumer-Grade Hardware
Junhao Dong (2026) · Purdue
Paper details
View paper · Open ALEX record
CYBERSECURITY RISKS IN OPEN BANKING SYSTEMS: THREATS, VULNERABILITIES, AND MITIGATION STRATEGIES
Tomilola Ayeni (2026) · World Journal of Advanced Research and Reviews
Paper details
View paper · Open ALEX record
CYBERSECURITY RISKS IN SOFTWARE DEVELOPMENT INDUCED BY THE “HERO MODE” PHENOMENON
V R Havryliak; I R Opirskyi (2026) · Computer systems and network
Paper details
View paper · Open ALEX record
Cybersecurity Vulnerabilities and Defense Mechanisms in the Automatic Identification System (AIS): An Information Systems Perspective
Tomasz Neumann (2026) · Journal of the Association for Information Systems
Paper details
View paper · Open ALEX record
Dataset of Hospital Website Security and Google Dorking Vulnerabilities in Indonesia
Haliza Putri Amelliani; Fathur Ramadhani Nur Rofiq; Gregorius Cahya Khrisna Setiaputra (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
Design and Implementation of an AI-Based Vulnerability Management Dashboard for Cybersecurity Operations
Mr. Ansuman Behera; Mr. Saswat Jena; Er. Jagannath Ray (2026) · American Journal of AI Cyber Computing Management
Paper details
View paper · Open ALEX record
Detecting Protracted Vulnerabilities in Open Source Projects
Arjun Sridharkumar; Sara Al Hajj Ibrahim; Jiayuan Zhou; Yuliang Wang; Safwat Hassan; Ahmed E. Hassan; Shurui Zhou (2026) · ACM Transactions on Software Engineering and Methodology
Paper details
View paper · Open ALEX record
Digital Vulnerabilities: Assessing Employee and Financial Risks in International Non-Governmental Organizations
Cuma Ali Özbek (2026) · Natural Sciences and Engineering Bulletin
Paper details
View paper · Open ALEX record
DNS Tool: Domain Security Audit Platform
Balboa, Carey James (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
Dynamic Risk Assessment by Bayesian Attack Graphs and Process Mining
Francesco Vitale; Simone Guarino; Stefano Perone; Massimiliano Rak; Nicola Mazzocca (2026) · arXiv (Cornell University)
Paper details
View paper · Open ALEX record
Ethical Hacking and Penetration Testing Handbook: A Practical Guide to Cybersecurity Assessment, Vulnerability Analysis, and Ethical Hacking Methodologies
V. Balaji Vijayan; Mrs. Subbulakshmi V; Mrs. Rohini C (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
Evaluating controller area network vulnerability threat modeling using cybersecurity frameworks
Devin Chen; Jonathan Smereka; Daniel Carruth (2026) · Unmanned Systems Technology XXVIII
Paper details
View paper · Open ALEX record
Exploiting Jolokia for Remote Code Execution: A Cybersecurity Analysis of CVE-2023-50780 in Apache ActiveMQ Artemis
Alexandru Răzvan Căciulescu; Matei Bădănoiu; Răzvan Rughiniș; Dinu Țurcanu (2026) · Computers
Paper details
View paper · Open ALEX record
Firmware Distribution as Attack Surface: A Security Study of ASIC Cryptocurrency Miners
Pierre Pouliquen; Hadrien Barral; David Naccache; Thibaut Heckmann; Antoine Houssais (2026) · ArXiv.org
Collection: ALEX regular weekly discovery review queue
Paper details
View paper · Open ALEX record
From Dismissed "Science Fiction" to National Emergency: Empirical Validation of the 2024 Cybersecurity Warning, the 2026 AI Vulnerability Explosion (85,355 CVEs), and Deterministic QFS-zkVM Interlocks Beyond Reactive Active Cyber Defense
Yoko(洋子) Hasebe(長谷部) (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
HackerSignal: A Large-Scale Multi-Source Dataset Linking Hacker Community Discourse to the CVE Vulnerability Lifecycle
Benjamin Ampel; Sagar Samtani (2026) · ArXiv.org
Paper details
View paper · Open ALEX record
How Much Does the Harness Matter, and for Whom? A Multi-Model Study of Context in LLM-Driven Vulnerability Discovery
Ganni Galea Curmi; Ben Wilde (2026) · arXiv (Cornell University)
Paper details
View paper · Open ALEX record · Source page
Human Vulnerability Assessment in Cybersecurity: A Systematic Literature Review of Methods, Models, and Instruments
Dimitra Papatsaroucha; Stavroula Psaroudaki; Eleftheria Vassilaki; Konstantina Pityanou; Evangelos Markakis (2026) · ArXiv.org
Paper details
View paper · Open ALEX record
Intrusion Models for Security Assessment: Methodology and Case Study on Xen
Charles Gonçalves; Marco Vieira (2026) · Proceedings of the ACM on Software Engineering
Paper details
View paper · Open ALEX record
Investigating Next.js React2Shell Exploitation
Martin Mladenov; Max van der Horst; Alexandru Hossu; Rok Štular; Harm Griffioen; Georgios Smaragdakis (2026) · Proceedings of the 2026 ACM Internet Measurement Conference
Paper details
View paper · Open ALEX record
IVS_RECON: An Integrated Vulnerability Scanning and Reconnaissance Framework
Bhargav Patil (2026) · International Journal for Research in Applied Science and Engineering Technology
Paper details
View paper · Open ALEX record
Knowing your weaknesses is your greatest strength: Mapping CVE to CWE by leveraging CWE Hierarchy and fine-tuned LLMs
Stefano Simonetto; Ronan Oostveen; Thijs van Ede; Peter Bosch; Willem Jonker (2026) · Proceedings of the ACM Asia Conference on Computer and Communications Security
Paper details
View paper · Open ALEX record
Knowledge-Augmented Large Language Models for Automated Characterization of Cybersecurity Vulnerabilities
Elijah Needham; Denis Ulybyshev; Ayesha Dina (2026) · The International FLAIRS Conference Proceedings
Paper details
View paper · Open ALEX record

Explore another perspective

These collections offer a different way into the library; their bibliographies need not contain the same papers.

Vulnerability Assessment · Investigation type
Malware & Exploits · Research category