CVE-2026-72654 Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure

Execution with Unnecessary Privileges CWE-250 in the Kibana machine learning feature can lead to information disclosure via Privilege Abuse CAPEC-122. An operation available to users holding only read access to the machine learning feature was performed with an internal service identity rather th...

CVE-2026-72654

CVE-2026-72654 is an Execution with Unnecessary Privileges (CWE-250) vulnerability in the Kibana machine learning feature . An operation available to users with only read access to the ML feature was executed using an internal service identity rather than the requesting user's own identity, allow...

CVE-2026-72649

This CVE affects the Elasticsearch machine learning component , where a deserialization of untrusted data flaw (CWE-502) via object injection (CAPEC-586) permits remote code execution . A specially crafted trained model artifact can cause attacker-controlled logic to execute with a materially bro...

CVE-2026-72649 Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

secretflow

简体中文｜English SecretFlow is a unified framework for privacy-preserving data intelligence and machine learning. To achieve this goal, it provides: An abstract device layer consists of plain devices and secret devices which encapsulate various cryptographic protocols. A device flow layer modeling...

offensive-ai-compilation

Offensive AI Compilation A curated list of useful resources that cover Offensive AI. 📁 Contents 📁 🚫 Abuse 🚫 🧠 Adversarial Machine Learning 🧠 ⚡ Attacks ⚡ 🔒 Extraction 🔒 ⚠️ Limitations ⚠️ 🛡️ Defensive actions 🛡️ 🔗 Useful links 🔗 ⬅️ Inversion or inference ⬅️ 🛡️ Defensive actions 🛡️ 🔗 Useful links 🔗 💉...

AIF360

AI Fairness 360 AIF360 The AI Fairness 360 toolkit is an extensible open-source library containing techniques developed by the research community to help detect and mitigate bias in machine learning models throughout the AI application lifecycle. AI Fairness 360 package is available in both Pytho...

promptfoo

Promptfoo: LLM evals & red teaming promptfoo is a CLI and library for evaluating and red-teaming LLM apps. Stop the trial-and-error approach - start shipping secure, reliable AI apps. Website · Getting Started · Red Teaming · Documentation ·...

batea

Batea A batea is a large shallow pan of wood or iron traditionally used by gold prospectors for washing sand and gravel to recover gold nuggets. Batea is a context-driven network device ranking framework based on the anomaly detection family of machine learning algorithms. The goal of Batea is to...

guardd

guardd Machine learning driven behavioral anomaly detection for Linux using eBPF + Isolation Forest Guardd collects low-level system events process execution, network activity, aggregates them into time-windowed feature vectors, and detects anomalous behavior using a machine learning model. Guard...

K2-CLI

Khao2 root@kitploit: ██╗ ██╗ ██████╗ ██║ ██╔╝ ╚════██╗ █████╔╝ █████╔╝ ██╔═██╗ ██╔═══╝ ██║ ██╗ ███████╗ ╚═╝ ╚═╝ ╚══════╝ Every single bit. Easy to use, informative and comprehensive steganalysis suite. This is a CLI tool for my SaaS sidehustle khao2.com for steganalysis. FAQs But what really is...

twebit

Bitcoin analysis with machine learning How it works? 1- Get tweets from twitter 2- Filter tweets 3- Tweet classification with naive bayes algorithm Positive,negative and neut Installation root@kitploit: git clone https://github.com/omergunal/twebit cd twebit pip3 install -r requirements.txt Updat...

SecML

SecML: A library for Secure and Explainable Machine Learning SecML is an open-source Python library for the security evaluation of Machine Learning ML algorithms. It comes with a set of powerful features: Wide range of supported ML algorithms. All supervised learning algorithms supported by...

Jammer-Loc

Jammer-Loc This repository includes the code and the Dataset Link for the paper “Machine and Deep Learning for Indoor UWB Jammer Localization.” Usage Example Run the hyperparameter optimization process: root@kitploit: python hpo.py \ --task classification \ --mode actual \ --framework ml \ --conf...

anomaly-flow

Anomaly-Flow Framework for implementing Intrusion Detection Systems NIDS aimed at identifying anomalies in network flows using Machine Learning models. Reference paper: Anomaly-Flow: A Multi-domain Federated Generative Adversarial Network for Distributed Denial-of-Service Detection Create the...

network-attack-detection

Network Attack Detection using Machine Learning Description This project leverages machine learning techniques to classify network attacks such as Port Scanning, Denial of Service DoS, and malware. The input data is in the Netflow V9 format, which is a standard format used by Cisco. The...

AIX360

AI Explainability 360 v0.3.0 ✨ NEW: IBM Research has a new In-Context Explainability 360 ICX360 toolkit that extends explainability to LLMs , specifically in terms of the input given to the LLM. Please check it out! 🚀✨ The AI Explainability 360 toolkit is an open-source library that supports...

deep-pwning

...

CVE-2025-25014

POC for CVE-2025-25014 A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints. Currently this POC only detects vulnerable instances. Usage root@kitploit: python CVE-2025-25014.py -u username -p password...

hexora

hexora Hexora is a static analysis tool designed to detect malicious and harmful patterns in Python code. It combines a rule-based static analysis engine with a machine-learned model that scores entire source files to classify them as malicious or benign. It can be used to: Audit project...