changeme

changeme 一个默认凭证扫描器。 关于 changeme 接续商业扫描器停止的地方。它专注于检测默认和后门凭证，而不一定检测常见凭证。它的默认模式是扫描 HTTP 默认凭证，但也支持其他凭证。 changeme 设计为可以轻松添加新凭证，而无需编写任何代码或模块。changeme 将凭证数据与代码分离。所有凭证都存储在 yaml 文件中，因此它们既易于人类阅读，也便于 changeme 处理。凭证文件可以通过使用 ./changeme.py --mkcred 工具并回答几个问题来创建。 changeme 支持...

machinae

Machinae 安全情报收集器 Machinae 是一款用于从公共站点/订阅源收集关于各类安全相关数据（IP 地址、域名、URL、电子邮件地址、文件哈希和 SSL 指纹）情报的工具。它受另一款优秀的信息收集工具 Automater 启发。Machinae 项目源于希望在以下 4 个方面改进 Automater： 1. 代码库 - 将 Automater 升级到 python3 兼容，同时让代码更 Pythonic 2. 配置 - 使用更人类可读的配置格式 YAML 3. 输入 - 默认支持 JSON 解析，无需编写正则表达式，同时在需要时仍支持正则抓取 4. 输出 -...

HoneySAP

HoneySAP: SAP Low-interaction honeypot Version 0.1.2.dev0 XXX 2022 Overview HoneySAP is a low-interaction research-focused honeypot specific for SAP services. It's aimed at learn the techniques and motivations behind attacks against SAP systems. Features low-interaction honeypot for SAP services...

holos

Docker compose for KVM. Define multi-VM stacks in one YAML file. No libvirt, no XML, no distributed control plane. Website and docs: https://zeroecco.github.io/holos/ The primitive is a VM, not a container. Every workload instance gets its own kernel boundary, qcow2 overlay, cloud-init seed, and...

OFFAT

OWASP OFFAT OWASP OFFAT（OFFensive Api Tester）旨在根据 OpenAPI 规范文件生成测试后，自动检测 API 的常见漏洞。它提供自动模糊测试输入的功能，并支持在测试中使用用户通过 YAML 配置文件提供的输入。 演示 注意：表中 'dataleak' 和 'result' 列代表独立的方面。端点可能存在数据泄露，但该端点的结果仍可能标记为 '成功'。这是因为 'result' 列不一定反映整体测试结果；即使存在数据泄露，它也可能显示为成功。 安全检测 受限 HTTP 方法 SQLi BOLA 数据暴露 BOPLA / 批量赋值 失效的访问控制...

rayder

Rayder 一款轻量级工具，用于编排和组织您的命令行工作流 关于 • 安装 • 使用 • 工作流配置 • 并行执行 • 工作流 关于 Rayder 是一款命令行工具，旨在简化工作流的编排与执行。您可以在 YAML 文件中定义一系列模块，每个模块包含一组待执行的命令。Rayder 帮助您自动化复杂流程，轻松简化重复性模块，并在命令之间无依赖时并行执行它们。 安装 要安装 Rayder，请确保您的系统已安装 Go（1.16 或更高版本）。然后运行以下命令： root@kitploit: go install...

rayder

Rayder A lightweight tool for orchestrating and organizing your command-line workflows About • Installation • Usage • Workflow Configuration • Parallel Execution • Workflows About Rayder is a command-line tool designed to simplify the orchestration and execution of workflows. It allows you to...

MONAI vulnerable to OS command injection

Comment from JPCERT/CC We are submitting the report again as we have yet to receive any responses from you after submitting it on February 5 and March 11. It would be greatly appreciated if you could send us a message after confirming it so that we can follow up the case by email. Summary MONAI...

CVE-2026-47398

PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor which patched CVE-2026-44334 / GHSA-xcmw-grxf-wjhj added the PRAISONAIALLOWLOCALTOOLS env-var gate to the tooloverride.py sinks. However, two additional spec.loader.execmodule call sites in praisonai/agentsgenerator.py were...

EUVD-2026-46306

PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor which patched CVE-2026-44334 / GHSA-xcmw-grxf-wjhj added the PRAISONAIALLOWLOCALTOOLS env-var gate to the tooloverride.py sinks. However, two additional spec.loader.execmodule call sites in praisonai/agentsgenerator.py were...

CVE-2026-47398

PRAISONAI vulnerability CVE-2026-47398: two unguarded calls to spec.loader.exec_module in praisonai/agents_generator.py allow arbitrary code execution when module_path from YAML is loaded. The issue exists in master prior to 4.6.40; fix is to gate by PRAISONAI_ALLOW_LOCAL_TOOLS and validate modul...

CVE-2026-15007

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were generated, the configuration file was parse...

Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload

ImpactThe Fides web application allows a custom integration to be uploaded as a ZIP file containing configuration and dataset definitions in YAML format. It was discovered that specially crafted YAML dataset and config files allow a malicious user to perform arbitrary requests to internal systems...

EUVD-2026-41999

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, database credential fields redispassword, keydbpassword, dragonflypassword, clickhouseadminuser, clickhouseadminpassword, postgresuser, mysqluser are validated only as...

CVE-2026-44936

CVE-2026-44936 describes an SSRF risk in SUSE Rancher Fleet’s bundle reader when the helmRepoURLRegex field is not set on a GitRepo. The vulnerability allows forwarding Helm authentication credentials (BasicAuth) to any URL specified in the fleet.yaml helm.repo field, potentially leaking admin cr...

📄 Espanso 2.3.0 Configuration Injection

This Python script is a configuration manipulation tool for Espanso version 2.3.0 that modifies its YAML configuration file base.yml to add new text triggers capable of executing system commands via shell or script extensions...

Unsafe Dependency Resolution

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

GHSA-78R8-WWQV-R299 PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334

Arbitrary code execution via ungated spec.loader.execmodule in agentsgenerator.py v4.6.32 chokepoint refactor bypass Summary The v4.6.32 chokepoint refactor which patched CVE-2026-44334 / GHSA-xcmw-grxf-wjhj added the PRAISONAIALLOWLOCALTOOLS env-var gate to the tooloverride.py sinks. However, tw...

PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334

Arbitrary code execution via ungated spec.loader.execmodule in agentsgenerator.py v4.6.32 chokepoint refactor bypass Summary The v4.6.32 chokepoint refactor which patched CVE-2026-44334 / GHSA-xcmw-grxf-wjhj added the PRAISONAIALLOWLOCALTOOLS env-var gate to the tooloverride.py sinks. However, tw...

Path Traversal

github.com/openclaw/crabbox is vulnerable to path traversal. The vulnerability is due to improper validation of workspace path resolution in the Islo provider, which allows an attacker to supply crafted absolute or relative paths through a malicious .crabbox.yaml or crabbox.yaml file to perform...