GeoSentinel

🌍 GeoSentinel GeoSentinel es una plataforma de monitoreo geoespacial que rastrea el movimiento global en tiempo real. Agrega rutas de vuelos y barcos, coordenadas en vivo y geodatos en un sistema unificado, proporcionando una clara conciencia geográfica y geopolítica para análisis, visualización ...

CVE-2026-73847-emlog-PoC

CVE-2026-73847 — emlog AI Assistant CSRF → SQL Execution → Admin Takeover PoC for missing CSRF protection on emlog pro's AI Assistant executetool endpoint, which lets an attacker ride an admin's authenticated session to run arbitrary SQL against the site database — including a full admin account...

openclaw

OpenClaw 🦞 — Your assistant, on your devices, in your chats...

jebmcp

A quick-and-dirty MCP server&Plugin for JEB Pro. Tested on Cline & Cursor & RooCode. Reference: https://github.com/mrexodia/ida-pro-mcp Installation Requirements root@kitploit: Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Usage COPY the src/jebmcp/MCP.py to...

ironclaw

IronClaw Tu asistente personal de IA seguro, siempre a tu lado English | 简体中文 | Русский | 日本語 | 한국어 Inicio rápido de Reborn • Filosofía • Características • Instalación • Configuración • Seguridad • Arquitectura Inicio rápido de IronClaw Reborn IronClaw Reborn es el runtime independiente en la ram...

stavrobot

Stavrobot Stavrobot es un asistente personal de IA construido con el principio de "todo el acceso que un asistente de IA necesita, y nada más". Tiene todas las buenas características de un asistente de IA, pero se enfoca en el aislamiento, la separación y los permisos mínimos. Es ligero y se...

pentest-muse-cli

Pentest Muse Pentest Muse es un asistente de IA diseñado para profesionales de la ciberseguridad. Puede ayudar a los testers de penetración a generar ideas, escribir payloads, analizar código y realizar reconocimiento. También puede tomar acciones, ejecutar comandos de línea y resolver tareas...

pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351 — pgAdmin 4 AI Assistant Read-Only Bypass via Lexer Differential PoC for CVE-2026-17351, a critical CVSS 9.0 SQL injection bypass in pgAdmin 4's AI Assistant. Vulnerability Summary pgAdmin 4 versions 9.13 through 9.16 use Python's sqlparse library to validate that LLM-generated SQL...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Disabled TLS Certificate Validation in the AI Assistant Network-adjacent MITM → LLM-provider API-key theft & AI-response injection...

Introducing AI Assistant for Akamai Web Security Analytics

Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Generador de Contenido e Imágenes = 1.7.7 - Autenticado Editor+ Subida Arbitraria de Archivos El complemento S2B AI Assistant de WordPress versiones 2.47 y anteriores contiene una vulnerabilidad de subida arbitraria de archivos que permite a usuarios...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – Asistente de escritura de contenido con IA = 1.0.18 - Autorización faltante para instalación/activación arbitraria de plugins por parte de usuarios autenticados Suscriptor+ Descripción Descripción El plugin 10Web AI Assistant – Asistente de escritura de contenid...

mcp-server

Offensive360 MCP Server Run Offensive360 SAST scans from inside your AI assistant. This Model Context Protocol server gives Claude Code, Claude Desktop, Cursor, and any other MCP client two tools: Tool| What it does ---|--- o360scanpath| Zips a local directory, runs a full SAST scan 60+ languages...

Kibana 9.1.7 < 9.4.5 / 9.5.x < 9.5.1 DoS (ESA-2026-115)

The version of Kibana installed on the remote host is 9.1.7 or later prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-115 advisory. - Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulatio...

Kibana 8.19.11 < 8.19.21 / 9.3.x < 9.4.6 / 9.5.x < 9.5.2 Incorrect Authorization (ESA-2026-142)

The version of Kibana installed on the remote host is 8.19.11 prior to 8.19.21, or 9.3.x prior to 9.4.6, or 9.5.x prior to 9.5.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-142 advisory. - Incorrect Authorization CWE-863 in Kibana can lead to unauthorized...

Crow-Eye v0.13.0

Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...

@docyrus/ui-pro-ai-assistant (>=0.8.4, <=0.13.11) potentially affected by CVE-2026-65842 via @platejs/docx-io (53.1.0)

@platejs/docx-io NPM version 53.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @platejs/docx-io and may be impacted: - @docyrus/ui-pro-ai-assistant =0.8.4, =0.13.11 Source cves: CVE-2026-65842 Source advisory: OSV:GHSA-4Q39-2JHR-7QX8...

CVE-2026-82884 All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block

The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privilege...

CVE-2026-82884

The All in One SEO WordPress plugin before 5.0.0.1 fails to sanitise and escape content stored in the ai-assistant Block within posts before rendering it in the post editor. This allows users with the contributor role or higher to inject a Stored Cross-Site Scripting (XSS) payload that executes w...

CVE-2026-82884 All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block

The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privilege...