Log4ShellAuditor

🤖 AUTO AUDIT Banco de demostración aislado de un agente ejecutor reflexivo autónomo Go/Java Русский 🇷🇺 • English 🇬🇧 • 中文 🇨🇳 • Español 🇪🇸 • Deutsch 🇩🇪 • Italiano 🇮🇹 • العربية 🇸🇦 🧭 Información general !NOTE AUTO AUDIT es un sistema de software que demuestra un ciclo cerrado 100% autónomo...

CVE-2025-27237

CVE-2025-27237 Vulnerabilidad de escalada de privilegios local en Zabbix Agent/Agent2 para Windows mediante el secuestro del archivo de configuración de OpenSSL. Resumen Campo| Valor ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 ALTO CWE| CWE-427: Elemento de ruta de búsqueda no controlado Tipo|...

CVE_POC_test

CVEPOCtest CVE-2019-13086漏洞的复现以及poc实验代码 原CVE信息： https://vulners.com/cve/CVE-2019-13086 实验环境： CSZ CMS架构+php5.4+MySQL 5.5+Apache 2.4 漏洞类型： SQL注入漏洞 文件上传漏洞 简要说明： 在\cszcms\cszcms\core\MYSecurity.php的csrfshowerror函数中 HTTP包的User-Agent字段在被添加到数据库查询语句中之前没有任何内容检测 这成为了可被构造sql注入的地方...

rea

English · 简体中文 · 日本語 · 한국어 · العربية REA: Reverse Engineer Anything Ingeniería inversa de cualquier cosa con agentes, desde el comportamiento de la aplicación hasta los binarios nativos. Ve una función que te guste. Comprende cómo funciona, hasta el nivel del binario. Inicio rápido · Estado actua...

CLEANSTART-2026-KC53993 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh

CVE-2026-39832 affects multiple packages. When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh. See references for individual vulnerability details...

third-thoughts

Terceros Pensamientos Un proyecto de investigación de Lightless Labs que estudia el comportamiento de los agentes de IA a escala mediante análisis multidisciplinario de corpus básicamente, lanzando cosas contra la pared y viendo qué se queda pegado. Nombrado a partir del concepto de Tiffany Achin...

CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message rega...

Linux Distros Unpatched Vulnerability : CVE-2026-59786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access...

Xalgorix Autonomous AI Pentesting Agent 4.6.152

Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...

OTRS-4.0.1-6.0.1-Remote-Command-Execution

OTRS-4.0.1-6.0.1 Remote Command Execution This exploit is developed based on https://www.exploit-db.com/exploits/43853 It will perform the authentication against OTRS panel and provide a reverse shell. Usage: python3 CVE-2017-16921.py CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS...

firmware-reverse-engineering

Firmware Reverse Engineering Skills Five agent skills from OrbitCurve for firmware extraction, static analysis, Ghidra reverse engineering, emulation, and security reporting, by Hussein Muhaisen. The collection packages the existing workflows, references, templates, and Ghidra scripts for Claude...

CVE-2021-27877-PoC

Prueba de concepto de CVE-2021-27877 Este repositorio contiene una versión modificada del módulo original de Rapid7 Metasploit para CVE-2021-27877 que afecta al agente Veritas Backup Exec. Durante mis pruebas, el módulo original de Metasploit identificaba correctamente el objetivo como vulnerable...

CVE-2026-71297 Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

EUVD-2026-92711

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

agent

Bomfather Agent Bomfather Agent es un agente basado en eBPF que se ejecuta en el espacio del kernel para bloquear acciones según una política. Creamos este agente para resolver los problemas que teníamos con las soluciones existentes. 1. Eran demasiado complejas de configurar y usar. 2. Eran...

opencode

开源的 AI Coding Agent。 English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt 安装 直接安装 YOLO curl -fsSL https://opencode.ai/install | bash 软件包管理器...

masq

Sit where the model sits. See what it can see. MASQ MASQ is a local security CLI for AI agent stacks. It sits in the same seat the model sits in: it reads MCP tool catalogs, completes the MCP handshake, looks through session logs, and probes local model HTTP ports. Then it prints findings and...

CVE-2026-76564

XSS Almacenado a través del User-Agent en la Vista de Pedidos del Administrador en PhocaCart PhocaCart ≤ 6.1.7 — Un atacante no autenticado almacena un payload XSS a través del checkout. Se ejecuta en el contexto del navegador del administrador RESUMEN PhocaCart 6.1.7 para Joomla almacena la...

hardstop

Hard Stop: Kernel-Level Preemption and Containment for Rogue Agentic Execution Architectural Comparison: Off-Board Hardware Fabrics DPUs / SmartNICs vs. In-Cache Kernel Preemption Hard Stop Off-board hardware security architectures route agent execution telemetry out-of-band across host I/O buses...

CVE-2026-59786

A flaw was found in Zabbix. A remote, unauthenticated attacker with network access to the trapper port can spoof host availability, compromising the integrity of monitoring data. The Zabbix server and proxy accept active agent heartbeat messages without verifying configured pre-shared key PSK or...