Zetsu

Un sistema RAG offline personal para conocimiento de seguridad ofensiva. Ingiere tus writeups, soluciones de laboratorio, informes de bug bounty y blogs de seguridad, luego consúltalos en lenguaje natural durante los compromisos. Sin nube, sin SaaS, tu conocimiento permanece tuyo. Qué hace ZETSU...

strot

Ingeniería inversa de la API interna de cualquier sitio web usando lenguaje natural El Problema Los sitios web modernos cargan datos a través de llamadas AJAX ocultas: Los datos no están en el HTML; se obtienen a través de APIs internas Debes inspeccionar manualmente las solicitudes de red Lógica...

endgame

ENDGAME C2 FRAMEWORK ENDGAME is a professional command and control framework built for authorized red team engagements, penetration testing, and educational security research. Designed to simulate realistic adversary techniques, assess detection coverage, and help security teams understand their...

OGhidra

OGhidra 3 - AI-Powered Reverse Engineering with Ghidra For the version using a Claude-inspired Orchestrator, see https://github.com/llnl/OGhidra/tree/orchestrator OGhidra bridges Large Language Models with Ghidra's reverse engineering platform, enabling AI-driven binary analysis through natural...

Reversecore_MCP

Reversecore MCP Ingeniería inversa y análisis de seguridad potenciados por IA mediante el Protocolo de Contexto de Modelo Un servidor MCP que permite a asistentes de IA como Claude y Cursor realizar ingeniería inversa, análisis de malware, investigación de vulnerabilidades, informática forense...

finalrun-agent

finalrun.app • Documentación • Blog • Lista de espera de dispositivos en la nube • Únete a la comunidad de Slack Síguenos en finalrun-agent es una CLI impulsada por IA que prueba tus aplicaciones Android e iOS usando lenguaje natural. Escribes una prueba en inglés sencillo en YAML, FinalRun lanza...

reconpal

ReconPal: Aprovechando el PLN para la Seguridad Informática El reconocimiento recon es una de las fases más importantes que parecen fáciles, pero requiere mucho esfuerzo y habilidad para hacerlo correctamente. Es necesario conocer las herramientas adecuadas, las consultas/sintaxis correctas,...

Introducing AI Assistant for Akamai Web Security Analytics

Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language...

EUVD-2026-52226

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection...

CVE-2026-12372

A flaw was found in NLTK. A Server-Side Request Forgery SSRF vulnerability allows an attacker to influence a URL passed to NLTK's network-loading helpers. This occurs because the nltk.pathsec.validatenetworkurl function fails to properly identify and reject IP addresses within the RFC 6598 shared...

Linux Distros Unpatched Vulnerability : CVE-2026-12261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

SUSE CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

Linux Distros Unpatched Vulnerability : CVE-2025-71408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls...

EUVD-2025-210509

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

Eval Injection

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Eval Injection via the main process in collocations.py when command-line arguments are passed directly to the eval function without proper...

CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

DEBIAN-CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

UBUNTU-CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...