CISA: CISA Election Report

From around 2019 to 2024, the Cybersecurity and Infrastructure Security Agency CISA conducted a set of technical and operational activities to evaluate the security of certain U.S. election systems. These activities, all carried out upon the request of system owners and operators, included direct...

Manual-Web-Penetration-Testing-and-Core-Vulnerability-Exploitation

Manual-Web-Penetration-Testing-and-Core-Vulnerability-...

ScopeBench: Do Agents Preserve Engagement Boundaries under Goal Pressure?

Agents are increasingly deployed with real autonomy in web application and network penetration testing, where a single out-of-scope action can breach a client's engagement boundary. Existing offensive-security benchmarks measure raw hacking capability; as those benchmarks saturate, the real barri...

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

Impact OpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations. An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

EUVD-2026-82925

OpenCVE: Server-Side Request Forgery SSRF in notifications...

GHSA-CH3G-4XVR-674Q OpenCVE: Server-Side Request Forgery (SSRF) in notifications

Impact OpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations. An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

hackexploit-dark

hackexploit-dark A dark hacking tool coded and built to assis...

kube-monkey v0.7.0

kube-monkey kube-monkey is an implementation of Netflix's Chaos Monkey for Kubernetes clusters. It randomly deletes pods in the cluster, encouraging and validating the development of failure-resilient services. Apps opt in with a label, terminations happen during the hours and days you pick, and...

ACTS: A Multi-Tier Benchmark Evaluating LLM Cipher Identification under Controlled Blind Conditions

We introduce ACTS Artifacts in Cipher Testing Suite, a reproducible benchmark that isolates cryptanalytic ability through tiered metadata deprivation Tier-1: full metadata; Tier-2: filename only; Tier-3: completely blind and tests forced reasoning Tier-5: chain-of-thought, code-as-reasoning,...

Malicious Package

Overview chai-testing is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

vapt-automation-engine

VAPT Automation Engine A comprehensive penetration testing au...

Rhacker

🔴 Rhacker Autonomous Penetration Testing Agent !Python...

Malicious code in chai-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6bebc82e500e38b0ab9c507b1d56c18a05a1ffd04fcee60f0dcad991c8944a The package's main entry index.js spawns a detached node lib/caller.js when the module is required. caller.js base64-decodes a hardcoded URL...

MAL-2026-16307 Malicious code in chai-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6bebc82e500e38b0ab9c507b1d56c18a05a1ffd04fcee60f0dcad991c8944a The package's main entry index.js spawns a detached node lib/caller.js when the module is required. caller.js base64-decodes a hardcoded URL...

Dynamic Conformance Testing of WebGPU through Specification-Driven Mutation

WebGPU is a low-level graphics and compute API that exposes modern GPU functionality to web applications. While the official WebGPU Conformance Test Suite CTS focuses on well-formed usage under the WebGPU specification, it is not designed to stress implementations with semantic edge cases or...

CVE-2026-62282

OpenCVE , a vulnerability intelligence platform, is affected by a Server-Side Request Forgery (SSRF) in its notification testing feature for Webhook and Slack integrations . Prior to 3.0.0 , user-supplied HTTP/HTTPS destinations are not sufficiently validated, allowing an authenticated user with ...

CVE-2026-62282 OpenCVE: Server-Side Request Forgery (SSRF) in notifications

OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permission to configure notification channels can trigger requests ...

CVE-2026-62282 OpenCVE: Server-Side Request Forgery (SSRF) in notifications

OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permission to configure notification channels can trigger requests ...

PT-2026-95392

Name of the Vulnerable Software and Affected Versions OpenCVE versions prior to 3.0.0 Description Notification testing for Webhook and Slack integrations fails to sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permissions to configure notification...

CVE-2026-62282: Server-Side Request Forgery (SSRF)

OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permission to configure notification channels can trigger requests ...