27608 matches found
opencode v1.18.11
The open source AI coding agent. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation root@kitploit: YOLO curl -fsSL...
oxo v2.9.18
OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...
CVE-2026-14197
The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted support agent to change the assigned customer of any ticket in the system, including tickets outside their granted scope...
CVE-2026-14197
The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted support agent to change the assigned customer of any ticket in the system, including tickets outside their granted scope...
WordPress Fluent Support plugin < 2.3.1 - Agent+ Arbitrary Ticket Customer Reassignment vulnerability
Agent+ Arbitrary Ticket Customer Reassignment vulnerability discovered by Mustafa Ahmed in WordPress Plugin Fluent Support versions 2.3.1...
[SECURITY] Fedora 44 Update: exim-4.99.5-1.fc44
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
SUSE CVE-2026-55777
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...
When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems
Large language models are increasingly integrated into autonomous robotic systems for task planning and control, but this integration exposes them to prompt injection attacks that can lead to unsafe decisions and physical harm. Multi-agent settings increase the risks through cross-agent...
PT-2026-67038
The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted support agent to change the assigned customer of any ticket in the system, including tickets outside their granted scope...
Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures
Multi-agent LLM pipelines orchestrate multiple specialized language model agents into structured workflows where intermediate outputs are passed across agents to solve complex tasks. This design introduces a security gap absent in single-agent settings: once an agent accepts adversarial content, ...
openSUSE 16 Security Update : google-guest-agent (openSUSE-SU-2026:21476-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21476-1 advisory. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege...
SUSE SLES15 Security Update : google-osconfig-agent (SUSE-SU-2026:3432-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3432-1 advisory. This update for google-osconfig-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject...
xalgorix v4.5.124
Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...
nono v0.71.0
Built by the team that brought you Sigstore The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central !NOTE In the lead-up to a 1.0 release, APIs are stabilizing. API changes may still occur where necessary, but will be kept to a minimum. !IMPORTANT Organization...
screenpipe app-v2.5.158
DOWNLOAD SCREENPIPE screenpipe | YC S26 Screenpipe remembers how you actually work Record your screen continuously locally and provide context to your agents Claude, Codex, Openclaw, Hermes, Runner... https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7f news 06/10 - we...
dugganusa-ietf — Updated!
DugganUSA — IETF Hackathon Contributions Real-world threat-intelligence contributions from DugganUSA LLC to the IETF Hackathon, offered to project champions as empirical grounding for standards work. We are a bootstrapped threat-intelligence shop. We run a public STIX 2.1 feed, an edge-blocking...
Filesystem Dropbox-like Polling Agent
Writes a Python implant that uses a shared directory as C2 dead-drop register/commands/results. Controller: listeners/filesystem/dropboxlikepolling. Requires a shared path SMB/NFS/sync — install as backdoor, not exploit payload. from kittysploit import class ModuleBackdoor: """Filesystem dead-dro...
Slack Socket Mode / Web API Polling Agent
Writes a Python implant that polls a Slack channel for commands and posts results. Controller: listeners/messaging/slacksocketmode. Requires a Slack bot token on the implant — install as backdoor, not exploit payload. from kittysploit import class ModuleBackdoor: """Slack Web API polling implant ...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7) +5214 more potentially affected by CVE-2026-56819 via io.netty:netty-codec-http2 (>=4.2.0.final, <=4.2.15.final)
io.netty:netty-codec-http2 MAVEN version =4.2.0.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-56819 Source advisory: GHSA-93WV-JW9V-4972...