apex

Pensar Apex 使用自主代理进行 AI 驱动的渗透测试——直接在您的终端中运行。运行黑盒和白盒渗透测试，探索、推理并发现真实漏洞。 想从云端运行或将其集成到您的 CI/CD 中？请参阅 Pensar Console。 使用场景 开发者 在合并 PR 之前运行 /pentest——像运行测试一样自然地捕获漏洞 获取可操作的发现结果，包含严重性评分、证据和建议修复方案——无需安全背景 通过无头 CLI 命令或 Pensar Console 集成到 CI/CD 中 安全工程师 在大型攻击面上部署代理驱动的集群测试 使用 /operator 模式进行手动调查、漏洞利用链构建和验证...

apex v2.4.0-canary.d5c18874

Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...

CVE-2026-36044

@pensar/apex = 0.0.58 is vulnerable to OS command injection via the smartenumerate tool. The createSmartEnumerateTool function in src/core/agent/tools.ts constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js...

CVE-2026-36044

@pensar/apex = 0.0.58 is vulnerable to OS command injection via the smartenumerate tool. The createSmartEnumerateTool function in src/core/agent/tools.ts constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js...

CVE-2026-36044: Improper Neutralization of Special Elements used in an OS Command

@pensar/apex = 0.0.58 is vulnerable to OS command injection via the smartenumerate tool. The createSmartEnumerateTool function in src/core/agent/tools.ts constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js...

PT-2026-43702

@pensar/apex = 0.0.58 is vulnerable to OS command injection via the smart enumerate tool. The createSmartEnumerateTool function in src/core/agent/tools.ts constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js chi...

CVE-2026-36044

CVE-2026-36044 affects @pensar/apex

Pensar Apex 安全漏洞

Pensar Apex is an AI-driven penetration testing tool developed by Pensar OpenSource. Versions of Pensar Apex 0.0.58 and earlier contain security vulnerabilities. These vulnerabilities stem from the createSmartEnumerateTool function in the smartenumerate tool, which constructs shell commands by...

CVE-2026-36044

@pensar/apex = 0.0.58 is vulnerable to OS command injection via the smartenumerate tool. The createSmartEnumerateTool function in src/core/agent/tools.ts constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js...