OWASP-WSTG-Rag

OWASP WSTG RAG OWASP 웹 보안 테스트 가이드WSTG를 벡터 데이터베이스에 색인화하는 검색 증강 생성RAG 시스템으로, REST API와 MCPModel Context Protocol를 통해 보안 테스트 방법론에 즉시 접근할 수 있으며 Claude Code와 통합됩니다. 특징 완전한 WSTG 범위 - 12개 WSTG 테스트 카테고리 전체가 색인화되어 검색 가능 의미 기반 검색 - 자연어 질의를 사용하여 관련 테스트 방법론을 찾을 수 있음 MCP 통합 - Claude Code와 직접 통합되어 AI 지원 침투...

Zetsu

오프라인 개인 RAG 시스템으로, 침투 테스트 지식을 관리합니다. 여러분의 writeup, 실습 솔루션, 버그 바운티 보고서, 보안 블로그를 수집한 후, 실무 중에 자연어로 질의할 수 있습니다. 클라우드도, SaaS도 없이, 여러분의 지식은 여러분의 것입니다. 기능 ZETSU는 여러분이 축적한 지식을 질의 가능한 어시스턴트로 바꿔줍니다. 마크다운 파일을 grep하거나, certipy 명령어가 어느 writeup에 있었는지 기억하려고 애쓰는 대신, 자연스럽게 물어보세요: SeImpersonatePrivilege로 어떻게 권한...

RAGSieve

RAGSieve Code for RAGSieve: Detecting Knowledge-Poisoned Documents in RAG Without a Trusted Reference. RAGSieve detects knowledge-poisoning documents at two points in a retrieval-augmented generation RAG system. RSQ is an online filter: it scores the five documents selected for generation against...

CVE-2026-5003

A vulnerability was found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. This affects the function handleindex of the file ragsystem/apiserver.py of the component Web Interface. Performing a manipulation results in information disclosure. It is possible to initiate the...

CVE-2026-5003 PromtEngineer localGPT Web api_server.py handle_index information disclosure

A vulnerability was found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. This affects the function handleindex of the file ragsystem/apiserver.py of the component Web Interface. Performing a manipulation results in information disclosure. It is possible to initiate the...

CVE-2026-5003

A vulnerability was found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. This affects the function handleindex of the file ragsystem/apiserver.py of the component Web Interface. Performing a manipulation results in information disclosure. It is possible to initiate the...

CVE-2026-5003 PromtEngineer localGPT Web api_server.py handle_index information disclosure

A vulnerability was found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. This affects the function handleindex of the file ragsystem/apiserver.py of the component Web Interface. Performing a manipulation results in information disclosure. It is possible to initiate the...

PT-2026-28721

Name of the Vulnerable Software and Affected Versions PromtEngineer localGPT versions prior to 4d41c7d1713b16b216d8e062e51a5dd88b20b054 Description A flaw exists in PromtEngineer localGPT that allows for information disclosure. The issue is located in the handle index function within the rag...

The Road to Agentic AI: Exposed Foundations

Our research into Retrieval Augmented Generation RAG systems uncovered at least 80 unprotected servers. We highlight this problem, which can lead to potential data loss and unauthorized access...

This Week in Spring - October 22nd, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring. I write this to you in an Uber speeding down the autobahn near Frankfurt, Germany. What a time to be alive! At the rate this driver's going, I won't have much time to write this before we've arrived, so let's dive right into...