TLDR Tech / InfoSec
Trevex (GitHub Repo)
Trevex is a black-box detection framework developed by CISPA researchers for discovering data-flow transient execution vulnerabilities on x86 architectures. The fuzzer successfully reproduced known flaws like Downfall and Meltdown, and discovered novel vulnerabilities including Floating-Point Divider State Sampling (FP-DSS, CVE-2025-54505) on AMD Zen 1/Zen+ and a new variant of LVI-NULL. It includes tools for local fuzzing, multi-machine orchestration via SSH, and result classification, though defenders should note it currently assumes an Ubuntu environment with the apt package manager.
Read the full story