PyRIT

Herramienta Python de Identificación de Riesgos para IA generativa PyRIT La herramienta Python de Identificación de Riesgos para IA generativa PyRIT es un marco de código abierto creado para capacitar a los profesionales de la seguridad y a los ingenieros a identificar riesgos de forma proactiva ...

AI-Red-Teaming-Playground-Labs

Laboratorios de Práctica de AI Red Teaming Este repositorio contiene los retos para los laboratorios utilizados en el curso "AI Red Teaming in Practice". El curso se impartió originalmente en Black Hat USA 2024 por Dr. Amanda Minnich y Gary Lopez. Martin Pouliot se encargó de la infraestructura y...

osint_toolkit

OSINT Toolkit Advertencia OSINT Toolkit aún no está listo para producción. Este es un prototipo temprano que aún necesita algo de trabajo. Una aplicación web fullstack construida para analistas de seguridad OSINT Toolkit es una plataforma de análisis autoalojable y bajo demanda diseñada para...

PurpleLlama

🤗 Modelos en Hugging Face | Blog | Sitio web | Artículo de CyberSec Eval | Artículo de Llama Guard Purple Llama Purple Llama es un proyecto general que, con el tiempo, reunirá herramientas y evaluaciones para ayudar a la comunidad a desarrollar soluciones de forma responsable con modelos...

Stevos-AI-Blocklist

Lista de bloqueo de IA de Stevo Una lista de filtros para uBlock Origin y AdGuard que oculta características específicas de sitios web que utilizan IA Generativa y contenido etiquetado como generado por IA. Disponible para PC/Linux Firefox, Edge, Chrome, Brave, macOS Firefox, Edge, Chrome, Safari...

offensive-ai-compilation

📁 Contenidos 📁 🚫 Abuso 🚫 🧠 Aprendizaje Automático Adversarial 🧠 ⚡ Ataques ⚡ 🔒 Extracción 🔒 ⚠️ Limitaciones ⚠️ 🛡️ Acciones defensivas 🛡️ 🔗 Enlaces útiles 🔗 ⬅️ Inversión o inferencia ⬅️ 🛡️ Acciones defensivas 🛡️ 🔗 Enlaces útiles 🔗 💉 Envenenamiento 💉 🔓 Puertas traseras 🔓 🛡️ Acciones defensivas 🛡️ 🔗...

bouncy-castle-generative-test-poc

Pruebas generativas de la vulnerabilidad de Bouncy Castle CVE-2020-28052 Ejecutar las pruebas Prueba las versiones vulnerables por defecto, 1.66 root@kitploit: $ clojure -M:test $ clojure -M:test:v1.65 Prueba las versiones anteriores a la vulnerabilidad y posteriores al parche 1.67 root@kitploit:...

EUVD-2026-77131

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

EUVD-2026-77138

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

CVE-2026-90603

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

CVE-2026-90602

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

CVE-2026-90603 Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

CVE-2026-90603

CVE-2026-90603 affects Anil-matcha Open-Generative-AI versions up to 1.0.11/2.0.0 . The vulnerability resides in the S3 Upload component, specifically the /api/upload-binary endpoint, where manipulation of the x-proxy-target-url argument enables an unrestricted upload . An unauthenticated remote ...

CVE-2026-90603 Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

CVE-2026-90602

A cross-site scripting (XSS) vulnerability affects the renderHistory function in ImageStudio.js within the Studio Components component of Anil-matcha Open-Generative-AI (versions up to 1.0.11/2.0.0). The attack can be initiated remotely and requires low privileges and user interaction , resulting...

CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

PT-2026-90987

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

PT-2026-90986

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The threat actors, which the artificial intelligence AI company has branded Generative...