ironclaw

IronClaw Votre assistant IA personnel sécurisé, toujours à vos côtés Anglais | 简体中文 | Русский | 日本語 | 한국어 Démarrage rapide Reborn • Philosophie • Fonctionnalités • Installation • Configuration • Sécurité • Architecture Démarrage rapide d'IronClaw Reborn IronClaw Reborn est l'environnement...

publications

Публикации Домашняя страница публикаций, включая слайды/статьи, proof-of-concept, видео и инструменты. Записи в блоге см. в блоге elttam, а информацию о наших услугах — на нашем сайте. Дата| Тип| Событие| Название| Ресурсы ---|---|---|---|--- 2026| adv| -| Home Assistant: произвольное чтение файл...

doppelganger_assistant

Doppelgänger Assistant 모든 카드 유형에 대해 Doppelgänger Core 및 Stealth가 지원하는 카드 데이터 계산과 Proxmark3 작업 자동화를 위한 전문 GUI 애플리케이션입니다. 이 도구는 직관적인 인터페이스에 이중 출력 표시, 시각적 구분선, 원클릭 클립보드 복사 기능을 제공하여 복잡한 Proxmark3 구문을 외우거나 메모를 뒤질 필요 없이 물리적 침투 테스트를 위한 카드 쓰기 과정을 간소화합니다. 기능 현대적인 GUI 인터페이스 : 상태 및 명령 출력 전용의 직관적인 2열 레이아웃 카드...

espectre

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

frigate

Frigate NVR™ — Распознавание объектов в реальном времени для IP-камер English | 简体中文 Полноценный локальный NVR, разработанный для Home Assistant с AI-распознаванием объектов. Использует OpenCV и Tensorflow для локального распознавания объектов в реальном времени для IP-камер. Настоятельно...

CVE-2026-97294

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...

nanoclaw

An AI assistant that runs agents securely in their own containers. Lightweight, built to be easily understood and completely customized for your needs. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agents in Slack: one app per agent Setup provisions each agent its own Slack app: manifest, avatar, and...

CVE-2026-97294

The David Lingren Media LIbrary Assistant plugin for WordPress (versions through 3.41 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts. Exploitation...

EUVD-2026-94248

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...

CVE-2026-97294 WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...

WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by yzx001 in WordPress Plugin Media LIbrary Assistant versions = 3.41...

jebmcp

Собранный на скорую руку MCP-сервер и плагин для JEB Pro. Протестировано на Cline, Cursor и RooCode. Ссылка: https://github.com/mrexodia/ida-pro-mcp Установка Требования Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Использование Скопируйте src/jebmcp/MCP.py в...

zclaw

zclaw Le plus petit assistant personnel IA possible pour ESP32. zclaw est écrit en C et fonctionne sur les cartes ESP32 avec un objectif strict de budget firmware tout-en-un de = 888 KiB sur la construction par défaut. Il prend en charge les tâches planifiées, le contrôle GPIO, la mémoire...

NoLongerEvil-Thermostat

Настройка прошивки термостата Nest 🏆 Победитель конкурса FULU 🏆 Hack House и этот проект являются официальными победителями FULU Bounty для Nest Learning Thermostat Gen 1/2 Аппаратная альтернатива: Если вас интересует аппаратная часть, посмотрите https://sett.homes — это вариант замены печатной...

stavrobot

Stavrobot Stavrobot est un assistant IA personnel conçu selon le principe « tous les accès dont un assistant IA a besoin, et rien de plus ». Il possède toutes les fonctionnalités intéressantes d'un assistant IA, mais met l'accent sur le sandboxing, l'isolation et les permissions minimales. Il est...

GeoSentinel

🌍 GeoSentinel GeoSentinel est une plateforme de surveillance géospatiale qui suit les mouvements mondiaux en temps réel. Elle agrège les routes maritimes et aériennes, les coordonnées en direct et les données géographiques dans un système unifié, offrant une vision géographique et géopolitique...

pentest-muse-cli

Pentest Muse Pentest Muse est un assistant IA conçu pour les professionnels de la cybersécurité. Il peut aider les testeurs d'intrusion à trouver des idées, écrire des payloads, analyser du code et effectuer des reconnaissances. Il peut également prendre des actions, exécuter des commandes en lig...

WordPress Media Library Assistant <= 3.34 - SQL Injection

David Lingren Media Library Assistant = 3.34 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-34885 info: name: WordPress Media Library Assistant = 3.34 -...

AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls

The plugin lacks sufficient access controls allowing an unauthenticated user to disconnect the plugin from OpenAI, thereby disabling the plugin. Multiple actions are accessible: ayschatgptdisconnect, ayschatgptconnect, and ayschatgptsavefeedback id: CVE-2024-7714 info: name: AI Assistant with...

LG LED Assistant - Unauthenticated Password Reset

The /api/changePw endpoint in LG LED Assistant allows unauthenticated password resets when requests are considered to come from localhost. An attacker can spoof the X-Forwarded-For header with value 127.0.0.1 to trigger the behavior and receive a success response. id: CVE-2024-2862 info: name: LG...