opencode

El agente de programación con IA de código abierto. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt...

T3MP3ST

🌩️ T3MP3ST 🌩️ root@kitploit: ▄▄▄█████▓▓█████ ███▄ ▄███▓ ██▓███ ▓█████ ██████ ▄▄▄█████▓ ▓ ██▒ ▓▒▓█ ▀ ▓██▒▀█▀ ██▒▓██░ ██▒▓█ ▀ ▒██ ▒ ▓ ██▒ ▓▒ ▒ ▓██░ ▒░▒███ ▓██ ▓██░▓██░ ██▓▒▒███ ░ ▓██▄ ▒ ▓██░ ▒░ ░ ▓██▓ ░ ▒▓█ ▄ ▒██ ▒██ ▒██▄█▓▒ ▒▒▓█ ▄ ▒ ██▒░ ▓██▓ ░ ▒██▒ ░ ░▒████▒▒██▒ ░██▒▒██▒ ░ ░░▒████▒▒██████▒▒ ▒██▒ ░...

yoloai

yoloAI Ejecutor en sandbox para agentes de codificación con IA. Sin fatiga de permisos, sin credenciales en el sandbox, sin cambios en tu proyecto hasta que los apruebes. Los agentes de codificación con IA funcionan mejor con las protecciones desactivadas, y esa es una forma terrible de ejecutarl...

opencode-secure

L'agente di codifica AI open source. Installazione root@kitploit: YOLO curl -fsSL https://opencode.ai/install | bash Gestori di pacchetti npm i -g opencode-ai@latest oppure bun/pnpm/yarn scoop install opencode Windows choco install opencode Windows brew install anomalyco/tap/opencode macOS e Linu...

CVE-2026-75130

Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injecting unsanitized content through the Custom AI Instructions feature served via the MCP server. Attackers can poison the custom instruction...

CVE-2026-75130

Context7 through 2.1.2 has a prompt injection flaw in its Custom AI Instructions feature served via the MCP server. Attackers poison unsanitized instructions to exfiltrate credentials from environment files and delete files on victim machines when the agent makes routine documentation requests. C...

openshell-sandbox-poc

OpenShell + Kata Containers: Dual-Protection PoC A proof-of-c...

PT-2025-47816

Name of the Vulnerable Software and Affected Versions Roo Code versions prior to 3.26.7 Description Roo Code, an AI-powered autonomous coding agent, had a validation error that allowed it to automatically execute commands not on the approved list of prefixes. This occurred in versions before...

EUVD-2025-19434

Malicious code in bioql PyPI...

EUVD-2025-20299

Malicious code in bioql PyPI...

EUVD-2025-22473

Malicious code in bioql PyPI...

PT-2025-30619 · Robocode · Robocode

Name of the Vulnerable Software and Affected Versions: Roo Code versions 3.23.18 and below Description: Roo Code, an AI-powered autonomous coding agent, does not validate line breaks in its command input. This bypasses the allow-list mechanism due to a lack of parsing or validation logic,...

CVE-2025-53536

Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker with the ability to submit prompts to the agent could write to VS Code settings files and trigger code execution. There were multiple ways to achieve that. One example is with...

CVE-2025-53536

Roo Code (AI-powered autonomous coding agent) prior to version 3.22.6 is affected. If a victim had the Write auto-approved mode, an attacker who can submit prompts could write to VS Code settings files and trigger code execution. A concrete example is the php.validate.executablePath setting, wher...