9205 matches found
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira...
pentest-ai v1.3.1
pentest-ai The pentest tool that proves its findings. No oracle, no badge. Website · Install · Why verification · Docs · Benchmarks · Agents · Discord ⚠️ Offensive tooling, authorized testing only. By installing you accept the AUP and Terms. Full text in Responsible use ↓ ptai is an AI-driven...
-
Vuln-Archive Skill A Claude Codehttps://claude.com/product...
vuln-archive-skills
Vuln-Archive Skill A Claude Codehttps://claude.com/product...
ejpt-mission-framework-poc
eJPT Mission Framework An evidence-backed Markdown workflow f...
GO-2025-3602 vulnerabilities
Vulnerabilities for packages: helm-push, flux-source-controller, chart-testing, cilium-cli, trivy, kubescape, tw, k9s, zot, eksctl, k8ssandra-client, cluster-api-helm-controller, kots, flux, helm-operator, pluto, rancher-helm, zarf, helm-docs, chartmuseum, flux-helm-controller, cert-manager-cmctl...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: helm-push, flux-source-controller, linkerd2, rancher-fleet, istio, chart-testing, cilium-cli, trivy, tw, cerbos, kargo, k8sgpt, k9s, zot, envoy-gateway, eksctl, k8ssandra-client, cluster-api-helm-controller, kots, helm-operator, pluto, rancher-helm, zarf, helm-docs,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: tekton-chains, yunikorn-k8shim, cis-operator, cluster-api-provider-vsphere, k8sgateway, cloud-provider-vsphere, kubernetes-csi-driver-nfs, gobuster, kapp-controller, headlamp, oauth2-proxy, witness, nuclei, cerbos, k8sgpt, docker-credential-gcr, envconsul,...
ReconTitan
A security-hardened platform for external reconnaissance, OSIN...
Workspace Topology As an Attack Vector in Agentic Coding Assistants
Agentic coding assistants are finding widespread use, not just in new code development but in quickly ingesting and leveraging third-party code. This opens up a risk of malicious code being ingested as these coding tools operate with broad filesystem access inside developer workspaces. In this...
MazeRunner: Nonlinear Task and Clue Orchestration for LLM-Driven Black-Box Automated Penetration Testing
Penetration testing is essential yet resource-intensive. Although large language models LLMs show promise for automating security auditing, existing agents mainly execute end-to-end workflows in simplified linear scenarios. Real-world black-box testing is fundamentally nonlinear: the attack graph...
The vulnerability of the installation service of the Oracle Application Testing Suite allows a perpetrator to gain full control over the application.
The vulnerability of the installation service Install of the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the Oracle Net protocol...
The vulnerability of the Load Testing module for Web apps within the Oracle Application Testing Suite allows a hacker to gain full control over the application.
The vulnerability of the Load Testing module for web apps within the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...
The vulnerability of the OpenScript package in the Oracle Application Testing Suite allows a hacker to gain full control over the application.
The vulnerability of the OpenScript package in the Oracle Application Testing Suite software automation suite is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...
internal-privesc-poc
Internal Privilege Escalation POC Library This library provid...
CyberStrike v1.1.16
English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी The first open-source AI agent built for offensive security. Automated...
brutus v1.11.0
Brutus "Et tu, Brute?" — The last words before credentials fall. Modern credential testing tool in pure Go Installation • Quick Start • Pipeline • Protocols • Enumeration • Proxy • Library Overview Brutus is a multi-protocol authentication testing tool designed to address a critical gap in...
ATOBench: Tracing How Autonomous Penetration-Testing Agents Verify Vulnerabilities When Target Evidence Lies
Autonomous penetration-testing agents rely on target responses. These responses guide both subsequent actions and the final report. A deceptive response can therefore redirect both the attack trajectory and the agent's verification process. However, final reports reveal little about how an agent...
