ReconAIzer

ReconAIzer ReconAIzer é uma extensão Jython poderosa para o Burp Suite que utiliza a OpenAI para ajudar caçadores de bug bounty a otimizar seu processo de reconhecimento. Esta extensão automatiza várias tarefas, tornando mais fácil e rápido para pesquisadores de segurança identificar e explorar...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / leitura de arquivo local via URL de resposta CVE-2026-13233 Upstream não confiável: o provedor buscava a URL indicada pela resposta do upstream. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Divulgação...

burpgpt

!IMPORTANT Annuncio del lancio di BurpGPT Pro, l'edizione specificamente progettata per soddisfare le esigenze dei professionisti e delle cyber boutique. Scopri una serie di funzionalità potenti e un'interfaccia intuitiva che migliora le tue capacità e garantisce un'esperienza utente ottimale. Pe...

codex-security

Codex Security @openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. 👉👉 See theCodex Security documentation for full documentation. Some cybersecurity requests and protected findings require approval through Trusted Access fo...

AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls

The plugin lacks sufficient access controls allowing an unauthenticated user to disconnect the plugin from OpenAI, thereby disabling the plugin. Multiple actions are accessible: ayschatgptdisconnect, ayschatgptconnect, and ayschatgptsavefeedback id: CVE-2024-7714 info: name: AI Assistant with...

SmartSearchWP < 2.4.6 - OpenAI Key Disclosure

The plugin does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, thereby leaking the OpenAI API key. id: CVE-2024-6845 info: name: SmartSearchWP 2.4.6 - OpenAI Key Disclosure author: s4e-io severity: medium...

CL4R1T4S

CL4R1T4S AI सिस्टम्स ट्रांसपेरेंसी और ऑब्जर्वेबिलिटी सभी के लिए! OpenAI, Google, Anthropic, xAI, Perplexity, Cursor, Windsurf, Devin, Manus, Replit और भी बहुत कुछ – लगभग सभी प्रमुख AI मॉडल + एजेंटों से पूरी तरह से निकाले गए सिस्टम प्रॉम्प्ट, दिशानिर्देश और उपकरण 📌 यह क्यों मौजूद है root@kitploit:...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

EscalateGPT

Introdução Ferramenta de Identificação de Escalação de Privilégios IAM Funcionalidades 🛠️ Identifica potenciais problemas de escalação de privilégios em políticas AWS IAM e Azure RBAC 💻 Utiliza modelos de IA mais avançados via OpenAI para análise 👍 Retorna caminhos de escalação e recomendações de...

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence AI-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May. The incident, the company said, took place during cybersecurity evaluations o...

burpgpt

!IMPORTANT Announcing the launch of BurpGPT Pro, the edition specifically tailored to meet the needs of professionals and cyber boutiques. Discover a host of powerful features and a user-friendly interface that enhances your capabilities and ensures an optimal user experience. To access these...

aegis-latent-core

Aegis Latent Core Gateway di governance e prove per applicazioni LLM multi-provider. Aegis Latent Core è un gateway compatibile con OpenAI che applica policy di richiesta, WAF, egress, rate-limit e controlli di sessione prima di inoltrare il traffico a un provider di modelli a monte. Per il...

cve-2025-59532-poc

CVE-2025-59532 डॉकर वातावरण CVE-2025-59532 का विश्लेषण करने के लिए एक डॉकर-आधारित शोध वातावरण, जो OpenAI Codex CLI में एक पाथ ट्रैवर्सल भेद्यता है जो इच्छित वर्कस्पेस सैंडबॉक्स के बाहर मनमानी फ़ाइल लेखन की अनुमति देती है। पतन 2025 में CMU पाठ्यक्रम : 18-739 हैकिंग और आक्रामक सुरक्षा का हिस्सा आरं...

promptfoo v0.122.1

Promptfoo: LLM evals & red teaming promptfoo is a CLI and library for evaluating and red-teaming LLM apps. Stop the trial-and-error approach - start shipping secure, reliable AI apps. Website · Getting Started · Red Teaming · Documentation · Discord Promptfoo is now part of OpenAI. Promptfoo...

LiteLLM - Server-Side Request Forgery

LiteLLM vulnerable to Server-Side Request Forgery SSRF vulnerability Exposes OpenAI API Keys. id: CVE-2024-6587 info: name: LiteLLM - Server-Side Request Forgery author: pdresearch,iamnoooob,rootxharsh,lambdasawa severity: high description: | LiteLLM vulnerable to Server-Side Request Forgery SSRF...

POC_CVE-2024-10829

POCCVE-2024-36420 Laboratório de reprodução local e rascunho de template nuclei para CVE-2024-36420 afetando Flowise. Sumário CVE-2024-36420 é uma leitura arbitrária de arquivos no Flowise causada pelo uso não sanitizado do parâmetro fileName no corpo da requisição em: POST...

badger-builder

badger-builder badger-builder è uno strumento assistito dall'IA per generare profili dinamici per Brute Ratel C4. Basta fornire a badger-builder un flavor per il profilo desiderato e chiederà a OpenAI una configurazione adatta. Configurazioni del profilo listener/payload generate dall'IA: URI C2...

TS_LLMLib

tsllmlib - Libreria LLM di TrustedSec TrustedSec LLM Library è una libreria Python per interagire con LLM locali che supportano l'uso di strumenti. Consente di eseguire grandi flussi di lavoro tradizionalmente possibili solo con modelli all'avanguardia sfruttando endpoint LLM locali e...

Sentinel-GPT

Sentinel-GPT: Agentische KI für die Bedrohungssuche 🛡️ Eine automatisierte Cybersicherheits-Pipeline, die rohe Azure-Protokolle mithilfe von LLM-basiertem Denken in umsetzbare Erkenntnisse umwandelt. 📖 Übersicht Sentinel-GPT ist ein KI-Agent, der auf die Bedrohungssuche in der Cybersicherheit...

POC_CVE-2024-36420

POCCVE-2024-36420 Laboratorio di riproduzione locale e bozza di template nuclei per CVE-2024-36420 che colpisce Flowise. Sommario CVE-2024-36420 è una lettura arbitraria di file in Flowise causata dall'uso non sanificato del parametro body fileName in: POST /api/v1/openai-assistants-file Questo...