OneAlert

OneAlert AI Security OS Open-source autonomous cyber defense for industrial networks AI agents that detect, investigate, hunt, and respond to threats across your OT/ICS infrastructure — with human approval gates and full audit trails. Demo Setup · Features · Quick Start · Architecture Try It Now...

MakerChecker

🛡️ MakerChecker The open-source security layer for AI agents. Deny-by-default enforcement, human approvals, and a cryptographically signed audit trail — so your agent runs only what it's granted and provably can't approve its own work. Website · Live Demo · mc scan · Docs Your agents keep running...

skillscript

Safe, reusable automation authored by agents. skillscript.ai • docs TL;DR — npm install -g skillscript-runtime && skillfile init && skillfile dashboard. See Quickstart. What is Skillscript? Skillscript came from asking: what would a Makefile look like if it built skills instead of binaries? The...

CVE-2021-38666-poc

CVE-2021-38666-poc You need to verify your identity and get approval...

SharpWSUS

SharpWSUS SharpWSUS is a CSharp tool for lateral movement through WSUS. There is a corresponding blog https://labs.nettitude.com/blog/introducing-sharpwsus/ which has more detailed information about the tooling, use case and detection. Credits Massive credit to the below resources that really did...

kviklet

Kviklet Kviklet.dev | Release Notes | Discord Secure access to production environments without impairing developer productivity. Kviklet pronounced Quick-let embraces the Four-Eyes Principle and a high level of configurability to allow a Pull Request-like Review and Approval flow for individual S...

CVE-2024-11680_PoC_Exploit

CVE-2024-11680 PoC Exploit This repository contains a Proof of Concept PoC exploit for CVE-2024-11680, a critical vulnerability in ProjectSend r1605 and older versions. The exploit targets an improper authentication flaw due Privilege Misconfiguration issues. Features Exploits improper auth to...

EUVD-2026-74279

n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket...

n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...

GHSA-35JJ-42HP-8GMQ n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...

NPM: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

NPM: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...

CVE-2024-34223

Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vulnerability Insecure Permission Description Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave...

CVE-2026-6145

CVE-2026-6145 — User Registration & Membership for WordPress: 未认证管理员审批绕过 针对 CVE-2026-6145 的概念验证漏洞利用，这是一个存在于 WordPress 插件 User Registration & Membership（≤ 5.1.5）中的缺失授权漏洞，允许未认证攻击者在创建新账户时绕过管理员审批要求。 摘要 | ---|--- CVE ID| CVE-2026-6145 CNA| Wordfence 漏洞类型| 缺失授权 — 管理员审批绕过 CWE| CWE-862（缺失授权） CVSS 3.1| 5....

sdk

@cosignet/sdk Thin, zero-dependency TypeScript client for Cosignet — human-in-the-loop approval for high-risk AI-agent actions, with payload-bound passkey signatures. Put a human in the loop before a dangerous action runs: pause it, get an explicit passkey approval from a person Face ID / Touch I...

CVE-2026-73317

CVE-2026-73317 XenForo before 2.3.13 lets an administrator with only the cache-rebuild permission dispatch an approval job as another user. What happens The ACP rebuild endpoint accepts a caller-supplied job class and options. Its authorization check asks only whether the chosen job declares itse...

jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25

脚本安全插件 用户指南 （改编自 CloudBees 插件指南中 模板插件 的信息） 多个 Jenkins 插件要求用户定义自定义脚本，最常见的是使用 Groovy 语言，以定制 Jenkins 的行为。如果编写这些脚本的每个人都是 Jenkins 管理员——特别是拥有 Overall/RunScripts 权限（例如脚本控制台链接所使用的权限）——那么他们可以编写任何他们喜欢的脚本。这些脚本可以使用插件所用的相同 API 直接引用 Jenkins 内部对象。这类用户必须完全受信任，因为他们可以对 Jenkins 做任何事情（甚至更改其安全设置或在服务器上运行 shell 命令）。...

CVE-2026-86077

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the...

CVE-2026-86077

n8n , an open-source workflow automation platform, contained an authorization flaw in the /chat WebSocket route (specifically the canResumeOverChat function in chat-execution-manager.ts). Prior to versions 2.37.7 and 2.38.2 , a resumeToken issued to an anonymous form submitter could be replayed o...

CVE-2026-86077 n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the...

CVE-2026-86077 n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the...