shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

CVE-2026-60758

Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM component: AI. Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Artificial Intelligence. While the...

PT-2026-77379

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Artificial Intelligence versions 25.12 through 26.6 Description A flaw in the AI component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized...

Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes, and control risk at human speed. When software output jumps 10 to 50 times, the problem is no longer just finding vulnerabilities. It ...

CVE-2026-68269

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence AI offline on its own servers, connecting document-search tools to files in its possession, and collecting the software part...

RHSA-2026:51146 Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - aom

Bulletin has no description...

AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

PortSwigger says HTTP Terminator, an artificial intelligence AI-assisted research system built by James Kettle , generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate desync vectors. PortSwigger said a separate human-guided discovery cascade also exposed a...

WordPress AI for SEO plugin <= 2.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ali Osman ERBAS 0110m4n in WordPress Plugin AI for SEO versions = 2.4.2...

CVE-2026-65581

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

CVE-2026-65581 WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

exploitarium

Statement This repo was incomplete when published. In regar...

RHEL 9 : RHEL AI 3.3 RPM runtime CVE fix - aom (Important) (RHSA-2026:51100)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51100 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

RHEL 9 : RHEL AI 3.4 RPM runtime CVE fix - aom (Important) (RHSA-2026:51146)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51146 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

Agentic AI Security: The Chatbot Era Is Already Over

This is Post 1 of a three-part series. Continue toPost 2: Generative AI Security: Why AI Needs a New Kind of Security, then continue to Post 3: OWASP LLM Top 10: What Comes Next – Agentic & MCP. There is a diagram most security teams still carry in their heads when they think about AI. A user tal...

Wiz at Black Hat 2026: Driving AI Threat Readiness

Announcing new capabilities that help organizations prepare for the AI era by expanding visibility and accelerating response, so security teams can defend at machine speed...

RHSA-2026:49716 Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - thrift

Bulletin has no description...

A week in security (July 27 – August 2)

Last week on Malwarebytes Labs: Fake Fortnite rewards are stealing players’ accounts Fake Flash Player installs AtlasRAT Malwarebytes for Windows, now available on the Microsoft Store Hims & Hers sued over alleged health data privacy failures Hidden prompt turns Microsoft Copilot into an AI worm...

exploitarium

Statement This repo was incomplete when published. In regar...