Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automatice el análisis de vulnerabilidades de seguridad, la evaluación de riesgos y la corrección en toda su base de código utilizando IA y el grafo de conocimiento de Orbit El Problema Los equipos de seguridad enfrenta...

zettelforge

ZettelForge O único sistema de memória agêntica construído para inteligência de ameaças cibernéticas. Quando um analista sênior sai, dois ou três anos de contexto vão junto com ele — ambientes de clientes, investigações anteriores, TTPs de atores, padrões de falso positivo, cada "espera, já vimos...

LinkScope_Client

LinkScope Client Download dell'installer Ottieni l'installer per LinkScope Client da qui: https://accentusoft.com/downloads/ Descrizione Questo è il repository del software di investigazione online LinkScope Client. LinkScope consente di effettuare investigazioni online rappresentando le...

bandjacks

Bandjacks Cyber Threat Defense World Modeling System Übersicht Bandjacks ist ein umfassendes Cyber-Bedrohungsinformationssystem CTI, das: MITRE ATT&CK-Techniken aus Bedrohungsberichten in 12-40 Sekunden extrahiert Einen Wissensgraphen von Bedrohungsakteuren, Techniken und Abwehrmaßnahmen erstellt...

rootly-graphify-importer

rootly-graphify Basato su graphify, uno strumento ispirato all'idea di Andrej Karpathy per un LLM Wiki: invece di riscoprire la conoscenza da zero a ogni query, un LLM costruisce un grafo di conoscenza persistente e strutturato che si arricchisce nel tempo. Graphify prende qualsiasi cartella di...

WhoCord

🕵️‍♂️ WhoCord v1.1 Trasforma qualsiasi nome utente, email, dominio, numero di telefono, immagine, URL o stringa di prova in un profilo d'identità completo. WhoCord è una piattaforma d'investigazione OSINT modulare che esegue decine di strumenti open‑source, costruisce un grafo della conoscenza,...

spectrIDA-Reverse_Engineering_Stack

👻 spectrIDA Fantasma attraverso i binari. Un assistente di reverse engineering locale e basato su IA: analisi parallela di IDA Pro, denominazione delle funzioni tramite IA, un terminale che non fa schifo, un grafo di conoscenza Neo4j di tutto ciò che ha mai scoperto, e un server MCP così Claude p...

IDAssist

IDAssist Plugin di Reverse Engineering Alimentato dall'IA per IDA Pro Autore: Jason Tang Descrizione IDAssist è un plugin per IDA Pro che integra l'analisi basata su LLM direttamente nell'interfaccia di IDA, offrendo reverse engineering binario assistito dall'IA attraverso provider LLM...

sift-kg

sift-kg Converta qualquer coleção de documentos em um grafo de conhecimento. Sem código, sem banco de dados, sem infraestrutura — apenas uma CLI e seus documentos. Insira PDFs, artigos, publicações ou registros — obtenha um grafo de conhecimento navegável que mostra como tudo se conecta, em...

CVE-2026-61808

LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed document content, upload or delete documents, modi...

CVE-2026-61808 LightRAG: Missing Authentication for Critical API Functions in Default Configuration

LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed document content, upload or delete documents, modi...

CVE-2026-61808

CVE-2026-61808 affects LightRAG up to version 1.5.4, where the API server binds to all network interfaces with authentication disabled by default. This allows an unauthenticated network attacker to read indexed documents, upload or delete documents, modify the knowledge graph, cancel pipelines, c...

Deloitte AI Assist for Customer multiple vulnerabilities

RISK EVALUATION Deloitte AI Assist for Customer contained multiple vulnerabilities. In the worst case, a remote, unauthenticated attacker could read or write data to the RAG corpus or make limited modifications to configurations. 2. RECOMMENDED PRACTICES Use only the most recent available...

CVE-2026-58473

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs no admin or superuser check. Attackers can redirect all L...

CVE-2026-58473

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs no admin or superuser check. Attackers can redirect all L...

CVE-2026-58473 Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs no admin or superuser check. Attackers can redirect all L...

CVE-2026-44830

Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Prior to 2.4.1, when APITOKEN is unset or empty, the BearerTokenAuthMiddleware bypasses authentication for all HTTP requests. Combined with the default 0.0.0.0 host binding and CORS alloworigins="",...

CVE-2026-44830

Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Prior to 2.4.1, when APITOKEN is unset or empty, the BearerTokenAuthMiddleware bypasses authentication for all HTTP requests. Combined with the default 0.0.0.0 host binding and CORS alloworigins="",...

EUVD-2026-32520

Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Prior to 2.4.1, when APITOKEN is unset or empty, the BearerTokenAuthMiddleware bypasses authentication for all HTTP requests. Combined with the default 0.0.0.0 host binding and CORS alloworigins="",...

Context-Aware Entity-Relation Extraction for Threat Intelligence Knowledge Graphs

Cybersecurity Knowledge Graphs CKGs unify diverse Cyber Threat Intelligence CTI sources into structured, queryable formats, offering scalable solutions for automating proactive and real-time security responses. Their increasing adoption has significantly enhanced the workflow and decision-making...