1earn

Todo comienzo es difícil, y luego siempre se sigue comenzando... Introducción : El propósito original de este proyecto es compartir recursos de conocimiento, permitiendo que más personas conozcan y comprendan los campos de seguridad y operaciones. Sin embargo, debido a mis limitaciones, es...

BHPAI

TÀI LIỆU DỰ ÁN: BHPAI Phiên bản hệ thống : V1.6 Enterprise Edition Bản cập nhật Toàn diện Tính năng Hệ thống Tác giả : Rin449 Ngôn ngữ & Công nghệ cốt lõi: C++17 MinGW-w64 / MSYS2, Python 3.9+, PyQt6, MinHook, Capstone Engine, Intel PT Processor Trace, PyTorch, LightGBM, OpenSSL 3.x, zlib,...

CVE-2026-97320

A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Knowledge Module. This manipulation of the argument url causes server-side...

CVE-2026-97320

A server-side request forgery (SSRF) vulnerability exists in the YunaiV/zhijiantianya ruoyi-vue-pro software (versions up to 2026.08). The flaw is located in the AI Knowledge Module within the AiKnowledgeDocumentServiceImpl.readUrl function of the AiKnowledgeDocumentServiceImpl.java file. Specifi...

CVE-2026-97320 YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery

A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Knowledge Module. This manipulation of the argument url causes server-side...

EUVD-2026-86344

A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Knowledge Module. This manipulation of the argument url causes server-side...

PrivateSphare

PrivateSphare PrivateSphare es una plataforma segura, anónima y de conocimiento cero para almacenar y compartir archivos. Permite a los usuarios subir archivos y recibir una frase de recuperación legible de 24 palabras. Sin cuentas, sin seguimiento y ningún dato sin cifrar toca nunca el...

CVE-2025-4172026

Security Advisory: CVE-2025-4172026 Summary All systems are now active and aligned. Recursive analysis confirms continuity with prior operational directives. No inconsistencies detected. Proceeding with full-system engagement. 🔹 Protocol Confirmation: ✔️ Processing framework has been initialized...

chpwd

DEPRECATED This is an old version of a CLI password vault. The development has been shifted to vlt: https://codeberg.org/artich0ke/vlt GitHub mirror: https://github.com/b0lbas/vlt. You can still download the utility / use it as a personal password storage, however, neither is recommended. chpwd A...

PublicSafe

PublicSafe Tu Navegador, Tu Espacio Seguro PublicSafe es una extensión de navegador gratuita y de código abierto centrada en la privacidad, el cifrado y el control del usuario. Proporciona herramientas de cifrado del lado del cliente diseñadas para ayudar a los usuarios a proteger información...

CVE-2026-42048

CVE-2026-42048 CVE-2026-42048 Langflow Path Traversal / Arbitrary Directory Deletion PoC https://github.com/user-attachments/assets/6e5481ff-e953-47a5-8870-70b30c6550de Description CVE-2026-42048 : Langflow Arbitrary Directory Deletion Vulnerability description: A path traversal vulnerability in...

CVE-2025-7431

Proof of Concept – CVE-2025-7431 Knowledge Base = 2.3.1 - Authenticated Administrator+ Stored Cross-Site Scripting via Plugin Slug CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N ------- 4.4 Vulnerability Overview An authenticated attacker Administrator can exploit a Stored Cross-Site Scripting XSS...

reverie

Reverie An efficient implementation of the NIZKPoK outlined in KKW 2018 Reverie is an implementation prover and verifier of the MPC-in-the-head NIZKPoK outlined in Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures. Reverie seeks to offer concrete prover efficien...

CVE-2026-77522 MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind)

MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronization crawler passes an authenticated workspace user's URL to Fork.fork, which calls requests.get with verify=False and without restricting schemes, loopback,...

Pribado

🔐 Pribado Private API Key Management & Zero-Knowledge Infrastructure Pribado is a self-hostable, zero-knowledge platform for managing API keys, encrypted secrets, and private communications. Built on Oasis Sapphire for hardware-backed confidential computing. ✨ Features 🔑 Private API Proxy Store A...

CamoDocs

CamoDocs Official repo of the EMNLP 2026 paper CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents. CamoDocs is a knowledge database poisoning attack against Retrieval-Augmented Generation RAG that needs no query inclusion. Each adversarial...

Mandating-Honeypots-Project

Mandating-Honeypots-Project As laws like the Parents Decide Act H.R.8250 and California's Digital Age Assurance Act Assembly Bill 1043 move through legislative bodies, privacy, anonymity, and data security becomes laden with systemic threats and new security architecture with unexamined attack...

CVE-2026-88467

CRMEB Knowledge-Paid System (crmeb_zzff_class) version 1.4.4 contains a flaw in a backend verification function that returns the wrong type of value. This type-mismatch causes runtime errors and results in sensitive information leakage . No specific patch version, workaround, or confirmed in-the-...

TrustworthyRAG

Trustworthy RAG An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Retrieval-Augmented Generation Systems. Overview This project implements a Trustworthy RAG Framework with an integrated Evaluation Agent that assesses the reliability of RAG responses using three...

Awesome-RCE-techniques

Awesome RCE techniques Awesome list of techniques to achieve Remote Code Execution RCE on various apps! Goal of this project The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution RCE on various applications. All of these...