9205 matches found
pt-identity__AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure !1https://u...
testkube v2.12.1
The Open Testing Platform for AI-driven Engineering Teams Testkube provides a single platform for defining, running and analyzing automated tests, using your existing testing tools/scripts, running in your Kubernetes infrastructure...
CVE-2026-72736
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy passes user-controlled values directly into shell commands via unquoted template literal interpolation in the registry credential testing and Docker Swarm cluster management endbpoints. Both endpoints have a sa...
OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause
OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence AI model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart said it's...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987-Poc Proof o...
PT-2026-69881
Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy passes user-controlled values directly into shell commands through unquoted template literal interpolation. This occurs within the registry credential testing and Docker Swarm cluster...
Security Tests As Executable Specifications for LLM Code Generation: Benefits, Trade-Offs, and Coverage Limits
Large language models LLMs can generate functionally useful code that remains vulnerable, while security-focused interventions may break intended behavior. We investigate security tests as executable specifications both before generation and during iterative repair. We develop SecTDD, a controlle...
Generating Attacks for LLMs with GFlowNets
The rapid advancement of Large Language Models LLMs has facilitated their ubiquitous integration into various domains, leading to widespread adoption. However, this escalating trend has introduced significant security vulnerabilities, necessitating the identification and mitigation of flaws arisi...
CVE-2026-72736: Improper Neutralization of Special Elements used in a Command
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy passes user-controlled values directly into shell commands via unquoted template literal interpolation in the registry credential testing and Docker Swarm cluster management endbpoints. Both endpoints have a sa...
MAL-2026-13666 Malicious code in cubesat-upstream-driver (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...
What SecureIQLab Cloud WAAP 5.0 means for your application security
You cannot verify a vendor’s security claims from their own datasheet, including ours. That is why independent validation matters. In our recent guide to the best WAAP solutions Best WAAP Solutions 2026: Enterprise Buyer Guide, we argued that every serious shortlist should include independent...
AutoSRC-AISkill
AutoSRC-AISkill A fully automated SRC vulnerability discover...
HermesPentBox
HermesPentBox — AI Pentest Workbench Language: English...
penetration-testing-windows10
Vulnerability Analysis and Penetration Testing Using Metasploi...
Exploit for CVE-2026-64638
CVE-2026-64638 – XSS2Shell: WordPress login page pre-authentic...
Exploit for CVE-2026-64638
XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...
Exploit for CVE-2026-71557
CVE-2026-71557: Go-Git path traversal PoC English versionR...
[SECURITY] Fedora 43 Update: perl-Devel-Cover-1.51-4.fc43
This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...