CVE-2026-42978-PoC-Research

CVE-2026-42978 Windows Push Notifications Module for AI Security Tool Next-Gen AI Security Ecosystem, Multi-Protocol Terminal & Autonomous Agent Suite Website · Product docs · Host application · Community chat Website navigation: Home · Updates · Downloads · Modules Official host application...

pentest-copilot

Pentest Copilot Un agente de pruebas de penetración de código abierto impulsado por IA. Se conecta a una caja de ataque Kali, ejecuta herramientas de forma autónoma, analiza los resultados e itera. Tú describes el objetivo. Él hace el resto. Diseñado para compromisos del mundo real, máquinas...

Argus

Argus Framework de Inteligencia de Seguridad Argus es un...

acp-framework-en

ACP — Agent Control Protocol Admission control for agent actions. Before any agent mutates system state, ACP answers four questions: Who is this agent? What are they authorized to do? Is this action policy-compliant? Can the outcome be traced to an accountable institution? Cryptographic identity ...

sentinel-mcp

SentinelMCP — AI驱动的网络防御系统 Google Cloud Hackathon 提交项目 — 由 Google Cloud Agent Builder Vertex AI Agent 编排的自主威胁检测与响应，基于 Gemini 2.0 Flash、模型上下文协议（MCP）和 Dynatrace 可观测性。 问题所在 安全团队在处理典型安全事件时，平均检测时间（MTTD）为 30分钟 ，平均修复时间（MTTR）为 4小时 。等到人工分析师检测到攻击、编写防火墙规则并部署完毕，损失早已造成。 解决方案 SentinelMCP 将 MTTD 缩短至 30秒，MTTR 缩短至...

autonomous-offensive-llm-handbook

📖 Read the handbook online : follow the lessons from your first fixture run to an agent with clear limits. The model proposes, the code disposes AUTONOMOUS SECURITY / THE BUILDER'S FIELD MANUAL Read the website · Start the course · Run the lab · Connect your model · The build sequence A practical...

CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover

🎯 CTT-Mailpit-Exploit: Puntuación Perfecta 11/10 Gusano Zero-Click Transforma una inyección básica de cabecera SMTP CVE-2026-23829 en un gusano RCE autopropagante con puntuación perfecta utilizando la Teoría del Tiempo Convergente. 📊 Transformación de Puntuación: 6.1 → 11.0/10 ⭐ Métrica Original...

AISA-Scanner

AISA-Scanner — Agente Autónomo de Seguridad con IA AISA-Scanner es un kit de herramientas de análisis de ciberseguridad autoevolutivo e impulsado por IA/ML que combina NLP, enriquecimiento de CVE, escaneo autónomo, modelado de riesgos y generación de informes de nivel empresarial en un solo marco...

apex

Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...

maritime-security-paper

海事安全研究论文 针对自主海事船舶安全漏洞的全面研究及防御建议 📄 概述 本仓库包含完整的海事安全研究论文、文档以及用于学术发表和研究传播的补充材料。 📊 仓库内容 主论文 maritimesecurityresearchpaperFINAL.md - 完整研究论文（11,000+ 字） maritimesecuritypaperCOMPLETE.md - 替代完整版 TechRxiv/paper001.pdf - 用于提交的 PDF 版本 防御建议 maritimedefenserecommendations.md - 实际防御实施方案...

CVE-2026-80156 Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that allows authenticated attackers to...

CVE-2026-80156 Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that allows authenticated attackers to...

CVE-2026-80155

Lantronix SLC8000 (before firmware v9.7.0.5 ), EMG8500/EMG7500 (before v9.7.0.1 ), and all firmware versions of SLB882/SLCx-03/SLCx-02 are affected by an unauthenticated authentication bypass in the web management portal upload endpoint. The root cause is a snprintf call with a fixed-size buffer ...

CVE-2026-80155 Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability in the web management portal upload endpoint that allows unauthenticated...

CVE-2026-80155 Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability in the web management portal upload endpoint that allows unauthenticated...

CVE-2026-80152 Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitra...

CVE-2026-80152

Lantronix SLC8000 (before firmware v9.7.0.3), EMG8500/EMG7500 (before v9.7.0.1), and SLB882/SLCx-03/SLCx-02 (all firmware versions) contain an OS command injection in the set script schedule command, which passes unsanitized user input to a system() call. An authenticated attacker with the servic...

CVE-2026-80151

Lantronix Autonomous Out-of-Band Devices (SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02) are affected by an OS command injection in the set nfs download command, which passes unsanitized user input to a system() call. Authen...

CVE-2026-80151 Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitra...

CVE-2026-80150

Lantronix autonomous out-of-band devices contain a server-side request forgery (SSRF) in the WebSSH/WebTelnet listener. The custom shellinaboxd process uses the rooturl parameter from the web connection to determine its own IP address; by modifying this parameter, an unauthenticated attacker can ...