BinAIVulHunter

BinAIVulHunter Плагин для IDA PRO, помогающий находить уязвимости в бинарных файлах. Используйте декомпилятор HexRays из IDA PRO вместе с OpenAI ChatGPT для поиска возможных уязвимостей в бинарных файлах Отказ от ответственности: ответы, полученные при попытке найти уязвимости в бинарных файлах с...

ReconAIzer

ReconAIzer ReconAIzer est une puissante extension Jython pour Burp Suite qui utilise OpenAI pour aider les chasseurs de bugs à optimiser leur processus de reconnaissance. Cette extension automatise diverses tâches, rendant plus facile et rapide pour les chercheurs en sécurité l'identification et...

MobSF_AI

MobSF AI Sidecar Ce projet ajoute un assistant de chat alimenté par l'IA au Mobile Security Framework MobSF. Il permet aux analystes de sécurité de poser des questions sur le rapport d'analyse généré par MobSF directement dans l'interface, en utilisant le modèle d'OpenAI. Fonctionnalités...

PT-2026-59100

composio =0.5.40 is vulnerable to Command Execution in composio openai, composio claude, and composio julep via the handle tool calls function...

PT-2026-35087

Name of the Vulnerable Software and Affected Versions langchain-openai versions prior to 1.1.14 Description The url to size helper function, utilized by get num tokens from messages for image token counting, contains a Time-of-Check to Time-of-Use TOCTOU flaw. The function validates URLs for...

WordPress plugin BetterDocs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

LangChain 代码问题漏洞

LangChain is an open-source framework developed by LangChain for creating applications powered by large language models LLMs. Versions of LangChain prior to 1.1.14 contained code vulnerabilities. These vulnerabilities stemmed from the urltosize helper function in langchain-openai, which, after...

CVE-2026-25083

GROWI OpenAI thread/message API endpoints expose authorization gaps: a logged-in user can view or tamper another user’s threads/messages if they know the shared AI assistant’s identifier. Affected versions are v7.4.5 and earlier. No remediation details are provided in the connected documents. The...

WordPress AI Engine Information Disclosure Vulnerability

WordPress AI Engine is a plugin based on OpenAI technology, which is mainly used to integrate artificial intelligence features into WordPress websites to improve the efficiency of content generation, automated operations and so on. WordPress AI Engine suffers from an information disclosure...

WordPress plugin AI Engine 信息泄露漏洞

WordPress AI Engine is a plugin based on OpenAI technology, which is mainly used to integrate artificial intelligence features into WordPress websites to improve the efficiency of content generation, automated operations and so on. WordPress AI Engine suffers from an information disclosure...

CVE-2024-0452

The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openaifileuploadcallback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above...