numasec

numasec オープンソースの AI セキュリティエージェント。 あなたの端末にセキュリティの頭脳を。 ローカルツール、エージェント、ランブック、発見事項、証拠、リプレイ、レポートを使ってセキュリティワークフローを実行します。 npm install -g numasec デモ | なぜ | 使用感 | 試す | 機能 | コマンド | アーキテクチャ | ロードマップ numasecとは？ numasecはターミナルで動作するAIセキュリティエージェントです。...

trust-my-agent-ai

🛡️ TrustMyAgent OpenClaw エージェント向けセキュリティボディーガード ウェブサイト • トラストセンター • クイックスタート • コントリビューション OpenClaw エージェント向けの EDR ライクなセキュリティエージェントです。14 のドメインにわたる 41 のセキュリティチェックを実行し、信頼スコア（0-100）を計算し、集中管理されたトラストセンターダッシュボードにテレメトリを送信します。人間や他のエージェントが信頼性を検証できます。 ステートレス設計 – メモリ上で完全に実行され、ローカルに何も保存せず、ホストに痕跡を残しません。 なぜ必要か AI...

Orbit Tracer

Orbit Tracer Orbit Tracer 安全代理，实现智能安全修复 利用 AI 和 Orbit 的知识图谱，自动化整个代码库的安全漏洞分析、风险评估与修复 问题 安全团队面临一个严峻挑战：发现漏洞很快，修复却耗时漫长。 root@kitploit: 手动漏洞修复流程： 1. SAST 扫描发现漏洞 5 分钟 2. 安全工程师分析影响 2 小时 3. 开发者创建修复 1 小时 4. 代码审查与批准 30 分钟 5. 合并与部署 30 分钟 总计：每个漏洞 4 小时以上 面对成百上千的发现结果和多个代码库，团队深陷手工操作，安全风险不断累积。 解决方案 Orbit Tracer...

CVE-2026-87913

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

EUVD-2026-75571

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

CVE-2026-87913

The AWS Security Agent MCP server prior to version 0.2.0 is vulnerable to a missing S3 bucket ownership verification , allowing remote attackers to obtain the private source archive of a scanned workspace — including credentials and infrastructure state — by registering a storage bucket whose nam...

CVE-2026-87913 Missing S3 bucket ownership verification in the AWS Security Agent MCP server

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

CVE-2026-87912

CVE-2026-87912 affects the AWS Security Agent plugin in Amazon aws-agents-for-devsecops prior to version 1.1.0. A missing S3 bucket ownership verification allows a remote attacker to obtain the private source archive of a scanned workspace—potentially exposing credentials and infrastructure state...

CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...

PT-2026-89470

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

Authentication Bypass by Primary Weakness

Overview Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the HTTPS Agent. An attacker can impersonate a client by exploiting PFX object-array key collisions, which may result in mutual TLS client identities being reused across requests configured...

TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (May 2026)

Overview Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises contain multiple vulnerabilities listed below. Relative path traversal in Apex One server CWE-23 - CVE-2026-34926 The only product that could be vulnerable to this exploit is TrendAI Apex One On Premise...

CVE-2026-39833 Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

The in-memory keyring returned by NewKeyring silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring now returns an error when...

CVE-2026-45207

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the abilit...