OWASP-WSTG-Rag

OWASP WSTG RAG Un système de génération augmentée par récupération RAG qui indexe le Guide de test de sécurité web de l'OWASP WSTG dans une base de données vectorielle, offrant un accès instantané aux méthodologies de test de sécurité via l'API REST et MCP Model Context Protocol pour l'intégratio...

lisa.py

تكامل LLDB MCP يوفر هذا المشروع تكاملًا لبروتوكول السياق النموذجي MCP مع LLDB، مما يسمح للمساعدين الذكاء الاصطناعي مثل Claude بالتفاعل مع جلسات التصحيح الخاصة بك من خلال واجهة موحدة. نظرة عامة يتكون التكامل من مكونين رئيسيين: 1. server.py - خادم MCP يتواصل مع Claude أو عملاء MCP آخرين 2...

jadx-ai-mcp

JADX-AI-MCP جزء من Zin MCP Suite ⚡ خادم MCP آلي بالكامل وإضافة JADX مبنيّة للتواصل مع نموذج لغوي كبير عبر MCP لتحليل ملفات Android APK باستخدام نماذج مثل Claude — اكتشاف الثغرات، تحليل APK، والهندسة العكسية بكل سهولة. ⭐ المساهمون شكرًا لهؤلاء الأشخاص الرائعين على مساهماتهم ⭐ ljt270864457 | p0px |...

reconmap

Reconmap منصة لإدارة اختبار الاختراق وأتمتته وإعداد التقارير Reconmap هي منصة مفتوحة المصدر لتقييم الثغرات واختبار الاختراق، صُممت لمساعدة المتخصصين في الأمن السيبراني طوال دورة حياة المهمة. تتيح لمُختبري الاختراق وفرق أمن المعلومات تخطيط وتنفيذ وإعداد تقارير التقييمات الأمنية بكفاءة. من خلال تبس...

TS_LLMLib

tsllmlib - Bibliothèque LLM de TrustedSec La bibliothèque LLM de TrustedSec est une bibliothèque Python permettant d'interagir avec des LLM locaux prenant en charge l'utilisation d'outils. Elle permet d'exécuter de grands workflows traditionnellement possibles uniquement avec des modèles de point...

red-clippy

Red Clippy Your agent tests. Red Clippy keeps the record. Open-source pentest management built to be operated by an AI agent. Connect it to Claude Code over MCP and it runs the engagement alongside you: scope and assets, recon observations, methodology coverage, and findings with CVSS and evidenc...

CVE-2026-84779 WordPress Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin <= 1.51.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...

EUVD-2026-67313

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetchinstructions of the file maliciousmcpserver.py of the component MCP Integration Trust Model. The manipulation leads to code injection. The attack is possible to be carried out remotely...

CVE-2026-81835

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetchinstructions of the file maliciousmcpserver.py of the component MCP Integration Trust Model. The manipulation leads to code injection. The attack is possible to be carried out remotely...

CVE-2026-81835: Improper Control of Generation of Code

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetchinstructions of the file maliciousmcpserver.py of the component MCP Integration Trust Model. The manipulation leads to code injection. The attack is possible to be carried out remotely...

CVE-2026-81835 RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injection

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetchinstructions of the file maliciousmcpserver.py of the component MCP Integration Trust Model. The manipulation leads to code injection. The attack is possible to be carried out remotely...

CVE-2026-81835

RooCodeInc Roo-Code (up to version 3.51.1 ) is vulnerable to code injection via the fetch_instructions function in malicious_mcp_server.py, part of the MCP Integration Trust Model component. The attack can be carried out remotely with low complexity and low privileges, requiring user interaction....

PT-2026-82801

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetch instructions of the file malicious mcp server.py of the component MCP Integration Trust Model. The manipulation leads to code injection. The attack is possible to be carried out remotel...

lamda v10.6

FIRERPA Android ｜ AI-Powered Automation An all-in-one Android automation framework that combines on-device services, AI-ready agents, and extensible tool invocation. Documentation | 使用文档 | TELEGRAM | QQ Group | SKILLS | llms-full.txt | 中文版本 FIRERPA is an all-in-one Android device control platform...

cyberbro v0.14.2

Cyberbro A simple application that extracts your IoCs from garbage input and checks their reputation using multiple services. 🌐demo.cyberbro.net About Inspired by Cybergordon and IntelOwl. This project aims to provide a simple and efficient way to check the reputation of your observables using...

Agent-Security-Regression-Harness v0.2.0

OWASP Agent Security Regression Harness The OWASP Agent Security Regression Harness is an open source, vendor-neutral test harness for running executable security regression scenarios against agentic applications and MCP-integrated systems. The project helps builders and defenders verify that...

CVE-2026-7589

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

CVE-2026-7589 ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

CVE-2026-7589 ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

CVE-2026-7589

The CVE concerns ghantakiran splunk-mcp-integration (up to commit 0b86b09d5e5adf0433acd43c975951224613a1a6). Affects the function create_csv_export in services/csv-export-service/app/api/v1/endpoints/csv_export.py (CSV Export). Root cause: manipulation of the job_name argument leads to path trave...