AMBER-ICI

AMBER ICI v5 AMBER ICI AMBER Investigative Command Interface is a local-first browser interface for investigative and analytical workflows powered by a local Ollama server. It includes: A single-model Analyst Console and multi-model Parallel execution A user-defined agent chain driven from the ma...

awesome-dfir-skills

🔥 awesome-dfir-skills A community-driven collection of DFIR / incident response skills : reusable prompts, workflows, and helper files that help practitioners move faster, stay consistent, and maybe—just maybe—get some sleep. 🚀 Quick Start 1. Pick a skill from skills/README.md 2. Copy/paste it in...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

agentic-radar

A Security Scanner for your agentic workflows!...

GHSA-M28W-2PQF-7QGJ vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-V245-V573-V5VM vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-59887 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-54490 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-XV26-6W52-CPH6 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-F5VJ-F2HX-8M93 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-MP7J-QC5W-4988 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-54466 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-14631 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-14620 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-86108 Security Advisory 0181

Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated...

CVE-2026-86108

CVE-2026-86108 is an OS command injection (CWE-78) in Arista VeloCloud Edge (formerly VeloCloud Edge by Broadcom), caused by insufficient validation of inputs in management and configuration workflows. An authorized attacker with a compromised VeloCloud Orchestrator or valid management credential...

EUVD-2026-80092

Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated...

PraisonAI - Authentication Bypass

PraisonAI 2.5.6 to 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server. id: CVE-2026-44338 info: name: PraisonAI -...

nimux

Pure-Nim network enumeration and remote execution toolkit nimux - Native Operator Toolkit nimux is a native command surface for authorized security assessments. It combines network enumeration, lightweight web discovery, credential validation, Active Directory operations, Kerberos workflows, remo...

osmedeus

Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...