strot

Ingeniería inversa de la API interna de cualquier sitio web usando lenguaje natural El Problema Los sitios web modernos cargan datos a través de llamadas AJAX ocultas: Los datos no están en el HTML; se obtienen a través de APIs internas Debes inspeccionar manualmente las solicitudes de red Lógica...

Zetsu

Un sistema RAG offline personal para conocimiento de seguridad ofensiva. Ingiere tus writeups, soluciones de laboratorio, informes de bug bounty y blogs de seguridad, luego consúltalos en lenguaje natural durante los compromisos. Sin nube, sin SaaS, tu conocimiento permanece tuyo. Qué hace ZETSU...

finalrun-agent

finalrun.app • Documentación • Blog • Lista de espera de dispositivos en la nube • Únete a la comunidad de Slack Síguenos en finalrun-agent es una CLI impulsada por IA que prueba tus aplicaciones Android e iOS usando lenguaje natural. Escribes una prueba en inglés sencillo en YAML, FinalRun lanza...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

OGhidra

OGhidra 3 - Ingeniería inversa impulsada por IA con Ghidra Para la versión que utiliza un Orchestrator inspirado en Claude, consulta https://github.com/llnl/OGhidra/tree/orchestrator OGhidra une los Grandes Modelos de Lenguaje con la plataforma de ingeniería inversa de Ghidra, permitiendo análisi...

reconpal

ReconPal: Aprovechando el PLN para la Seguridad Informática El reconocimiento recon es una de las fases más importantes que parecen fáciles, pero requiere mucho esfuerzo y habilidad para hacerlo correctamente. Es necesario conocer las herramientas adecuadas, las consultas/sintaxis correctas,...

endgame

ENDGAME C2 FRAMEWORK ENDGAME es un framework profesional de mando y control diseñado para compromisos autorizados de red team, pruebas de penetración e investigación educativa en seguridad. Diseñado para simular técnicas realistas de adversarios, evaluar la cobertura de detección y ayudar a los...

Introducing AI Assistant for Akamai Web Security Analytics

Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language...

EUVD-2026-52226

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection...

The vulnerability of the NLTK library package for symbolic and statistical processing of natural language lies in its insecure initialization of resources, which allows attackers to bypass existing security mechanisms.

The vulnerability of the NLTK library package for symbolic and statistical processing of natural language is related to insecure initialization of resources. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

CVE-2026-12372

A flaw was found in NLTK. A Server-Side Request Forgery SSRF vulnerability allows an attacker to influence a URL passed to NLTK's network-loading helpers. This occurs because the nltk.pathsec.validatenetworkurl function fails to properly identify and reject IP addresses within the RFC 6598 shared...

Linux Distros Unpatched Vulnerability : CVE-2026-12261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

CVE-2026-12259 Improper Input Validation in nltk/nltk

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

SUSE CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

Linux Distros Unpatched Vulnerability : CVE-2025-71408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls...

EUVD-2025-210509

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

Eval Injection

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Eval Injection via the main process in collocations.py when command-line arguments are passed directly to the eval function without proper...

DEBIAN-CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...