307 matches found
Zetsu
Un système RAG hors ligne personnel pour la connaissance en sécurité offensive. Ingérez vos writeups, solutions de labos, rapports de bug bounty et blogs de sécurité, puis interrogez-les en langage naturel lors de vos engagements. Pas de cloud, pas de SaaS, vos connaissances restent les vôtres. C...
Reversecore_MCP
Reversecore MCP Model Context Protocol을 통한 AI 기반 리버스 엔지니어링 및 보안 분석 Claude, Cursor와 같은 AI 어시스턴트가 자연어를 통해 리버스 엔지니어링, 악성코드 분석, 취약점 연구, 디지털 포렌식 및 소스 코드 감사를 수행할 수 있게 해주는 MCP 서버입니다. 목차 Reversecore MCP란 무엇인가? 아키텍처 도구 카탈로그 120개 도구 가이드 분석 프롬프트 22개 모드 MCP 리소스 11개 URI 빠른 시작 AI 클라이언트에 연결 구성 보안 모델 개발 CI/CD...
finalrun-agent
finalrun.app • Docs • Blog • Cloud Device Waitlist • Join Slack Community 팔로우하기 finalrun-agent는 자연어로 Android 및 iOS 앱을 테스트하는 AI 기반 CLI입니다. YAML에 평이한 영어 테스트를 작성하면, FinalRun이 에뮬레이터 또는 시뮬레이터에서 앱을 실행하고, AI 모델Gemini, GPT, 또는 Claude을 사용하여 화면을 인식하고 각 단계탭, 스와이프, 타이핑를 수행한 후, 비디오 및 장치 로그와 함께 합격/불합격 보고서를...
OGhidra
OGhidra 3 — Обратная разработка с помощью ИИ и Ghidra Для версии с использованием Orchestrator, вдохновлённого Claude, см. https://github.com/llnl/OGhidra/tree/orchestrator OGhidra объединяет большие языковые модели с платформой обратной разработки Ghidra, позволяя выполнять анализ бинарных файло...
reconpal
ReconPal: استخدام البرمجة اللغوية العصبية لأمن المعلومات يعد الاستطلاع من أهم المراحل التي قد تبدو سهلة ولكنها تتطلب الكثير من الجهد والمهارة لتنفيذها بشكل صحيح. يحتاج المرء إلى معرفة الأدوات المناسبة والاستعلامات/الصياغات الصحيحة وتشغيل تلك الاستعلامات وربط المعلومات وتنقية المخرجات. قد يكون كل...
endgame
ENDGAME C2 FRAMEWORK ENDGAME is a professional command and control framework built for authorized red team engagements, penetration testing, and educational security research. Designed to simulate realistic adversary techniques, assess detection coverage, and help security teams understand their...
strot
Rétro-concevez l'API interne de n'importe quel site web avec le langage naturel Le Problème Les sites web modernes chargent les données via des appels AJAX cachés : Les données ne sont pas dans le HTML - elles sont récupérées via des API internes Vous devez inspecter manuellement les requêtes...
CVE-2026-12372
A flaw was found in NLTK. A Server-Side Request Forgery SSRF vulnerability allows an attacker to influence a URL passed to NLTK's network-loading helpers. This occurs because the nltk.pathsec.validatenetworkurl function fails to properly identify and reject IP addresses within the RFC 6598 shared...
Linux Distros Unpatched Vulnerability : CVE-2026-12261
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives...
EUVD-2026-52226
In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...
CVE-2026-12259
In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...
CVE-2026-12259
In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...
SUSE CVE-2025-71408
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
Linux Distros Unpatched Vulnerability : CVE-2025-71408
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls...
EUVD-2025-210509
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
CVE-2025-71408
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
DEBIAN-CVE-2025-71408
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
UBUNTU-CVE-2025-71408
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
CVE-2025-71408
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
CVE-2025-71408
The CVE-2025-71408 issue affects NLTK up to version 3.9.2 (pre-3.9.3). The vulnerability lies in nltk.collocations’ main path, where command‑line arguments are passed directly to eval() to form BigramAssocMeasures suffixes without a allowlist or sanitization, enabling an attacker who can control ...