PyRIT

Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. !WARNING PyRIT has moved! Please see...

Slackware Linux 15.0 / current stunnel Vulnerability (SSA:2026-261-01)

The version of stunnel installed on the remote host is prior to 5.82. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-261-01 advisory. New stunnel packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

CVE-2020-16898

This is an educational exercise. Use at your own risk. CVE-2020-16898 Exploit Windows Binary PoC root@kitploit: ./CVE-2020-16898.exe -t -u will run the exploit. ./CVE-2020-16898.exe -t 10.10.10.1 -u Administrator See my other exploits here This is a lesson as to why you should not trust binaries ...

OWASP-Top-10-AI-Infrastructure-Security-Risks

Los 10 Principales Riesgos de Seguridad en Centros de Datos e Infraestructura de IA FORGE - Endurece el metal debajo del modelo. 🌐 Sitio web: https://forge-framework.io Resumen Ejecutivo Los centros de datos de IA se están construyendo más rápido de lo que se están asegurando. La rápida expansión...

Vulnerability-Risk-Assessment-TVRA-Enterprise-Network

This repository does not have a README...

Teach-AppSec

Teach-AppSec Teach AppSec es un proyecto de seguridad de aplicaciones de OWASP que actualmente tiene módulos de enseñanza para Gestión de Riesgos, Desarrollo de Software y Seguridad de Operaciones. Se añadirán más módulos a este proyecto a medida que se vayan desarrollando. Este proyecto se pone ...

Exploit-Mapper

Exploit Mapper A comprehensive vulnerability management platform that analyzes security scan reports, enriches vulnerability data with exploit intelligence, and provides actionable risk scoring for prioritized remediation. Features Multi-Format Import : Support for CSV and Excel vulnerability...

ThreatSentry-AI

ThreatSentry AI: AI-Powered Threat Hunting Tool Automate external asset discovery, intelligently enrich with multi-source data, and leverage ensemble machine learning to predict and prioritize risk. Transform alert fatigue into actionable intelligence. 🚀 Mission Statement ThreatSentry AI eliminat...

Nexora

Nexora Nexora is an AI-driven enterprise endpoint governance and security intelligence system that monitors software usage across machines, applies policy-based risk classification, and generates structured behavioral and security reports. It is designed for environments where organizations need...

AISA-Scanner

AISA-Scanner — Agente Autónomo de Seguridad con IA AISA-Scanner es un kit de herramientas de análisis de ciberseguridad autoevolutivo e impulsado por IA/ML que combina NLP, enriquecimiento de CVE, escaneo autónomo, modelado de riesgos y generación de informes de nivel empresarial en un solo marco...

PSCF

OWASP Product Security Capability Framework PSCF https://prods.ec/ El OWASP Product Security Capability Framework PSCF es una guía integral diseñada para estructurar y mejorar la seguridad de los productos de software. Mediante un enfoque estructurado para identificar, implementar y gestionar...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH ServiceNow AI Agent Audit Script v1.1 Jan 2026 Secure Your AI Future – Enterprise-Grade Audit Tool with 2026 Updates This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH – your global...

gp_netSecDSS

netSecDSS Decision Support System for Risk Assessing Network and System Security in SMEs A Docker-based network security monitoring platform built for small and medium enterprises that can't afford commercial SIEM tools. It simulates a realistic multi-subnet SME network, runs staged attack...

CVE-2026-76796

The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope. Fixed in 1.6.2. The fix limits access...

zeek-quic

Analizador/detector de QUIC de Google para Zeek Este analizador puede analizar y detectar la implementación de Google de QUIC llamada GQUIC aquí por simplicidad, utilizando el formato de cable descrito en: https://www.chromium.org/quic. La versión de GQUIC utilizada por Chrome al momento de...

cve-2021-44228-log4j-exploits

CVE-2021-4428 复现 本DEMO是针对Log4j2 超高危RCE漏洞CVE-2021-4428的复现DEMO，目的是认识该漏洞的危害性并根据您系统的情况做出针对性的防御。 警告 本DEMO只是针对技术层面的研究，不涉及恶意远程计算机侵入方面的相关脚本。请勿利用漏洞进行非法侵入他人计算机的违法活动。否则您将可能承担以下侵权责任： 1. 根据《中华人民共和国治安管理处罚法》第二十九条 对违反国家规定，侵入计算机信息系统，造成危害的，处五日以下拘留;情节较重的，处五日以上十日以下拘留。 2...

tawasolpay-risk-assistant

TawasolPay — AI-Powered Cyber Risk Assistant Takes TawasolPay...

Astra Linux – Vulnerability in Rails

A potential information disclosure/vulnerability in Action Pack = 2.0.0, where using the redirectto or polymorphicurl helper with untrusted user input may lead to unintended method executions...

Astra Linux – Vulnerability in WebKit2GTK

A “use-after-free” issue has been addressed through improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, and watchOS 10.6. Processing maliciously crafted web content may lead to an...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mctp: Route lookups now perform under a RCU read-side lock. Our current route lookups mctproutelookup and mctproutelookupnull traverse the network’s route list without holding the RCU read lock. This means that the route lookups...