ethibench

Dal Controllato al Selvaggio: Valutazione degli Agenti di Pentesting nel Mondo Reale Gli agenti di pentesting basati su intelligenza artificiale sono sempre più credibili come sistemi di sicurezza offensiva, ma i benchmark attuali forniscono ancora indicazioni limitate su quali sistemi otterranno...

badger-builder

badger-builder badger-builder è uno strumento assistito dall'IA per generare profili dinamici per Brute Ratel C4. Basta fornire a badger-builder un flavor per il profilo desiderato e chiederà a OpenAI una configurazione adatta. Configurazioni del profilo listener/payload generate dall'IA: URI C2...

EUVD-2026-66404

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...

medusa

🐍 MEDUSA - Scanner di Sicurezza AI...

CVE-2026-82270

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

CVE-2026-55245

Bifrost is an enterprise AI gateway for routing requests to model providers. Prior to 1.5.17, the isPublicIP function in core/providers/utils/fetch.go, reached through FetchAndEncodeURL for Bedrock and Vertex image or document URLs, classifies Carrier-Grade NAT 100.64.0.0/10, IPv6 6to4 2002::/16,...

Flowise-CVE-2025-58434-PasswordReset

CVE-2025-58434 — Flowise AI Nicht authentifizierter Passwort-Reset Übersicht CVE-ID: CVE-2025-58434 Betroffene Software: Flowise AI Verwundbare Versionen: = 3.0.5 Behobene Version: 3.0.6 und höher Schweregrad: Kritisch Autor: r3nsi15 Datum: 2025 Beschreibung Flowise AI Versionen bis einschließlic...

ThreatSentry-AI

ThreatSentry AI: Ferramenta de Caça a Ameaças Orientada por IA Automatize a descoberta de ativos externos, enriqueça inteligentemente com dados de múltiplas fontes e aproveite o aprendizado de máquina ensemble para prever e priorizar riscos. Transforme a fadiga de alertas em inteligência acionáve...

CVE-2026-55245

Bifrost is an enterprise AI gateway for routing requests to model providers. Prior to 1.5.17 , the isPublicIP function in core/providers/utils/fetch.go (reached via FetchAndEncodeURL for Bedrock and Vertex image/document URLs) incorrectly classifies CGNAT (100.64.0.0/10) , IPv6 6to4 (2002::/16) ,...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Deaktivierte TLS-Zertifikatsprüfung im KI-Assistenten Netzwerknaher MITM → Diebstahl des LLM-Anbieter-API-Schlüssels & Injektion von KI-Antworten...

CVE-2026-82270 Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

EUVD-2026-67801

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

CVE-2026-82270 Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

CVE-2026-82270

Portkey AI Gateway through version 1.15.2 contains a Server-Side Request Forgery (SSRF) vulnerability in the /v1/proxy/* route. The root cause is the absence of the requestValidator middleware on that endpoint. An unauthenticated attacker can set the x-portkey-custom-host header to an internal ad...

CVE-2026-82112

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...

CVE-2026-37751

An OS command injection vulnerability in the killSessionSync function lib/agent-runtime.ts of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input...

bx2-writeups

Writeups de Segurança Uma coleção dos meus writeups de segurança cibernética cobrindo: TryHackMe Hack The Box Escalação de Privilégios no Linux Segurança de IA e Infraestrutura CTFs Desafios de Segurança Autor: Nanashi Bx2...

CVE-2026-42208

✦ CVE-2026-42208 - Kritische SQL-Injection in LiteLLM 🧭 Übersicht CVE-2026-42208 ist eine kritische SQL-Injection-Schwachstelle vor der Authentifizierung , die das LiteLLM-AI-Gateway betrifft. Sie ermöglicht Angreifern, Backend-Datenbankabfragen ohne Authentifizierung auszunutzen und dabei...

CVE-2026-34724

🚨 CVE-2026-34724 - Zammad 7.0.1 - Iniezione di Template Lato Server SSTI per Esecuzione di Codice Remoto RCE tramite Agente AI 📌 Panoramica Zammad è un popolare sistema di helpdesk e supporto clienti open-source basato sul web. CVE-2026-34724 è una vulnerabilità di Iniezione di Template Lato Serv...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – AI content writing assistant = 1.0.18 - Mancanza di autorizzazione per l'installazione/attivazione arbitraria di plugin per utenti autenticati Subscriber+ Descrizione Il plugin 10Web AI Assistant – AI content writing assistant per WordPress è vulnerabile alla...