rhuss__jolokia_CVE-2018-1000129_1-4-0

Jolokia は、JMX MBean にリモートからアクセスするための新しい方法です。JSR-160 コネクタとは異なり、エージェントベースのアプローチであり、REST スタイルの JSON over HTTP を使用して通信します。 さまざまな環境向けに、複数のエージェントが用意されています。 WAR Agent （Java EE サーバーに Web アプリケーションとしてデプロイするためのエージェント） OSGi Agent （OSGi コンテナにデプロイするためのエージェント。このエージェントはバンドルとしてパッケージされ、ミニマルとオールインワンの 2 種類があります） JVM...

gha-lab-ca4fa82ac5

自動生成された研究アーティファクト — 上流プロジェクトではありません。 このリポジトリは、Université Laval の修士論文のために、公開されている GitHub Actions ワークフローの脆弱性を再現する目的で自動ハーネスによって構築された使い捨てラボです。これは mesa/mesa のコミット 821c14475afebc6a68a45bb4b8e87be4d36a0c41（2026-03-04）の逐語的なスナップショットであり、そのプロジェクト自身のライセンスの下で再配布されています。そのライセンスファイルはこのスナップショットに変更なしで含まれています。...

douglas-042-HQ

Douglas-042 总部 面向没有 EDR 的环境，基于代理的威胁狩猎与事件响应。 扫描一批 Windows 和 Linux 主机以寻找入侵迹象，判断哪些真正重要， 并采取行动——从一个控制台完成，每台主机只需一条命令。 它能做什么 狩猎不是扫描。Douglas 会收集分析师本应手动收集的痕迹—— 进程、服务、计划任务、自启动项、连接、账户、 驱动、事件日志、cron、systemd、shell 历史、Web 根目录——并在其上运行 201 条内置检测规则 ，外加你自己的 Sigma、YARA 和自定义规则。 然后它完成大多数工具留给你的部分：它会告诉你哪些发现仍 需要决策...

phantomrecon

PhantomRecon PhantomRecon は、CLI ベースのモジュール式・エージェント駆動型レッドチーム自動化ツールであり、AI（Agent Development Kit - ADK を介した Google の Gemini）を活用した自律型オフェンシブセキュリティワークフローを実証するために設計されています。 クイックスタート（CLI） 対話型コンソールを実行（metasploit スタイル）: root@kitploit: python -m phantomrecon ワンショット非対話型実行: root@kitploit: python -m phantomrecon...

PT-2026-81209

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

Can Open-Source LLM Agents Replace Static Application Security Testing Tools? an Empirical Assessment

This paper explores the value of agentic AI tools for cybersecurity purposes. We evaluate the efficacy of a general-purpose GenAI Large Language Model- GenAI- based agent when powered by three different Ollama-hosted general-purpose open source models. We assess each agent's performance using...

Towards Demystifying and Repairing LLM-In-The-Loop Vulnerabilities

Large Language ModelsLLMs have been actively integrated into modern software systems as critical components. LLM-in-the-loop vulnerabilities, where vulnerabilities are introduced by LLMs and their dependent downstream components, such as frameworks, introduce new risks. Although some benchmark...

Generating Proof-Of-Vulnerability Tests to Help Enhance the Security of Complex Software

Developers create modern software applications Apps on top of third-party libraries Libs. When library vulnerabilities are reachable through application code, the applications can be vulnerable to software supply chain attacks. Prior work shows that developers often require concrete and executabl...

CVE-2026-29075

Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commi...

PT-2026-23726

Name of the Vulnerable Software and Affected Versions Mesa versions prior to 3.5.1 Description Mesa is a Python library used for agent-based modeling and simulating complex systems. A flaw exists where checking out untrusted code within the benchmarks.yml workflow could allow for code execution...

Tenable vs. Hive Pro: Key Differences Explained

If your security team is drowning in a sea of vulnerability alerts and struggling to make sense of multiple risk scores, you know that more data doesn't always mean more clarity. “The right threat exposure management platform should cut through the noise, not add to it.” When evaluating your...

Favia: Forensic Agent for Vulnerability-Fix Identification and Analysis

Identifying vulnerability-fixing commits corresponding to disclosed CVEs is essential for secure software maintenance but remains challenging at scale, as large repositories contain millions of commits of which only a small fraction address security issues. Existing automated approaches, includin...

ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applications

AI agent-based systems are becoming increasingly integral to modern software architectures, enabling autonomous decision-making, dynamic task execution, and multimodal interactions through large language models LLMs. However, these systems introduce novel and evolving security challenges, includi...

Poster: Enhancing GNN Robustness for Network Intrusion Detection Via Agent-Based Analysis

Graph Neural Networks GNNs show great promise for Network Intrusion Detection Systems NIDS, particularly in IoT environments, but suffer performance degradation due to distribution drift and lack robustness against realistic adversarial attacks. Current robustness evaluations often rely on...

An Agent-Based Modeling Approach to Free-Text Keyboard Dynamics for Continuous Authentication

Continuous authentication systems leveraging free-text keyboard dynamics offer a promising additional layer of security in a multifactor authentication setup that can be used in a transparent way with no impact on user experience. This study investigates the efficacy of behavioral biometrics by...

From Searching in the Dark to Seeing Ahead With Hive Pro’s Enhanced BAS

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on Hive Pro's Enhanced BAS! During a recent incident response, I...

CVE-2023-51748

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

CVE-2023-51751

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

CVE-2023-51751

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

CVE-2023-51751

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...