ctxdebug

MISSION CONTROL FOR REVERSE ENGINEERING One stdio interface · 160+ tools · Three debuggers, one mission control. Quick Start · Architecture · Servers · Workflows · Report an Issue Website · ctxdebug.xyz · Contact · [email protected] · Status · Public alpha...

dbeaver

DBeaver Strumento database multipiattaforma gratuito per sviluppatori, programmatori SQL, amministratori di database e analisti. Ha molte funzionalità tra cui editor di schema, editor SQL, editor di dati, integrazione AI, diagrammi ER, esportazione/importazione/migrazione dei dati, piani di...

MCPwner

MCPwner बैजर से सावधान सुरक्षा अनुसंधान ऑटोमेशन के लिए मॉडल कॉन्टेक्स्ट प्रोटोकॉल सर्वर इनके साथ संगत:...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Avvio Rapido • Installazione • Documentazione • Esempi Dai al tuo programma di threat hunting memoria e agentività...

rep-chrome

rep+ rep+ è un'estensione leggera per Chrome DevTools ispirata a Repeater di Burp Suite, ora potenziata con l'IA. Spesso ho bisogno di esplorare qualche richiesta senza avviare l'intero stack Burp, così ho creato questa estensione per mantenere il mio flusso di lavoro veloce, mirato e intelligent...

burp-ai-agent

Custom AI Agent Il ponte tra Burp Suite e l'IA moderna. Nota sul nome: questa estensione è pubblicata come Custom AI Agent in precedenza Burp AI Agent. È stata rinominata per conformarsi ai requisiti di denominazione del BApp Store di PortSwigger e per evitare confusione con il provider Burp AI...

cheatengine-mcp-bridge

Demo Cheat Engine MCP Bridge Lassen Sie milliardenschwere KI-Rechenzentren den Programmspeicher für Sie analysieren. Erstellen Sie Mods, Trainer, Sicherheitsaudits, Game-Bots, beschleunigen Sie Reverse Engineering oder tun Sie alles andere mit jedem Programm und Spiel in einem Bruchteil der Zeit...

CVE-2026-10755

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such as Contributors to overwrite or reset the site-wide AI integration state...

CVE-2026-10755

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such as Contributors to overwrite or reset the site-wide AI integration state...

CVE-2026-10755 All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such as Contributors to overwrite or reset the site-wide AI integration state...

CVE-2026-10755

The CVE-2026-10755 entry concerns the All in One SEO WordPress plugin (pre-4.9.9). The issue is improper access control on AI integration REST API endpoints, allowing low-privilege users (e.g., Contributors) to overwrite or reset the site-wide AI integration state. This is caused by insufficient ...

The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?

Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding programs that can move...

EUVD-2026-39790

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS...

ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints

Summary Missing authentication middleware in the ActualBudget server component allows any unauthenticated user to query the SimpleFIN and Pluggy.ai integration endpoints and read sensitive bank account balance and transaction information. Impact This vulnerability allows an unauthenticated attack...

CVE-2026-27584

Actual is a local-first personal finance tool. Prior to version 26.2.1, missing authentication middleware in the ActualBudget server component allows any unauthenticated user to query the SimpleFIN and Pluggy.ai integration endpoints and read sensitive bank account balance and transaction...

Community-powered security with AI: an open source framework for security research

Since its founding in 2019, GitHub Security Lab has had one primary goal: community-powered security. We believe that the best way to improve software security is by sharing knowledge and tools, and by using open source software so that everybody is empowered to audit the code and report any...

aiptx-cyber-mcp

Cyber MCPs - Security Tools for AI !MCP Securityhttps://...

CISA, Australia, and Partners Author Joint Guidance on Securely Integrating Artificial Intelligence in Operational Technology

CISA and the Australian Signals Directorate’s Australian Cyber Security Centre, in collaboration with federal and international partners, have released new cybersecurity guidance: Principles for the Secure Integration of Artificial Intelligence in Operational Technology. This guidance aims to hel...

​​Forrester names Microsoft a Leader in the 2025 Zero Trust Platforms Wave™ report

We are proud to share that Forrester has named Microsoft a Leader in The Forrester Wave™: Zero Trust Platforms, Q3 2025 report, ranking us highest in the strategy category. With so many strong vendors and solutions in the Zero Trust space, you need solid data to make the right choice for your...

This Week in Spring - July 8th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I write this having spent a wonderful week in paradise Bora Bora, French Polynesia, to be precise with my partner Tam Mie. We were so very sad to have to say goodbye. But that means I'm officially back at my desk, with nary a...