314 matches found
numasec
numasec 오픈소스 AI 보안 에이전트. 터미널에 보안 두뇌를 부여하세요. 로컬 도구, 에이전트, 런북, 발견 항목, 증거, 재생 및 보고서로 보안 워크플로우를 실행하세요. npm install -g numasec 데모 | 왜 | 사용감 | 사용해보기 | 기능 | 명령어 | 아키텍처 | 로드맵 numasec이란 무엇인가? numasec은 터미널에서 실행되는 AI 보안 에이전트입니다. 이미 머신에 설치된 도구를 사용하며, 보안 런북을 따르고, 사이버 에이전트 간 전환하고, 작업 컨텍스트를 유지하며, 발견 항목을 추적하고, 증...
Orbit Tracer
Orbit Tracer インテリジェントなセキュリティ修復のための Orbit Tracer セキュリティエージェント AI と Orbit のナレッジグラフを使用して、コードベース全体のセキュリティ脆弱性分析、リスク評価、修復を自動化 問題 セキュリティチームは重大な課題に直面しています:脆弱性の発見は速い。しかし修正には永遠に時間がかかる。 root@kitploit: Manual vulnerability remediation workflow: 1. SAST scan finds vulnerability 5 minutes 2. Security engineer...
trust-my-agent-ai
🛡️ TrustMyAgent OpenClaw 에이전트를 위한 보안 보디가드 웹사이트 • 트러스트 센터 • 빠른 시작 • 기여하기 OpenClaw 에이전트를 위한 EDR 스타일의 보안 에이전트입니다. 14개 도메인에 걸쳐 41개의 보안 검사를 실행하고 신뢰 점수0100를 계산하며, 중앙 집중식 트러스트 센터 대시보드로 텔레메트리를 전송하여 사람과 다른 에이전트가 신뢰성을 확인할 수 있도록 합니다. 무상태Stateless 설계 – 메모리에서만 실행되며 로컬에 아무것도 저장하지 않고 호스트에 흔적을 남기지 않습니다. Why AI...
CVE-2026-87913
A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...
EUVD-2026-75571
A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...
CVE-2026-87913
The AWS Security Agent MCP server prior to version 0.2.0 is vulnerable to a missing S3 bucket ownership verification , allowing remote attackers to obtain the private source archive of a scanned workspace — including credentials and infrastructure state — by registering a storage bucket whose nam...
CVE-2026-87913 Missing S3 bucket ownership verification in the AWS Security Agent MCP server
A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...
CVE-2026-87912
CVE-2026-87912 affects the AWS Security Agent plugin in Amazon aws-agents-for-devsecops prior to version 1.1.0. A missing S3 bucket ownership verification allows a remote attacker to obtain the private source archive of a scanned workspace—potentially exposing credentials and infrastructure state...
CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops
A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...
CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops
A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...
CVE-2026-87912: Unverified Ownership
A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...
CVE-2026-87913: Unverified Ownership
A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...
PT-2026-89470
A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...
Authentication Bypass by Primary Weakness
Overview Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the HTTPS Agent. An attacker can impersonate a client by exploiting PFX object-array key collisions, which may result in mutual TLS client identities being reused across requests configured...
PT-2026-57083
Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information...
TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...
TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...
TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...
TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...
TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...