825 matches found
guardian-cli
🔐 Guardian AI-Powered Penetration Testing Automation Platform Guardian is an enterprise-grade AI-powered penetration testing automation framework that combines multiple AI providers OpenAI GPT-4, Claude, Google Gemini, OpenRouter, Requesty with battle-tested security tools to deliver intelligent,...
CVE-2025-65753
CVE-2025-65753 Proof of concept for CVE-2025-65753: Remote code execution on the Gryphon Guardian access point, firmware version 01.06.0006.22, through an improper TLS certificate validation. Description The Gryphon Guardian WiFi access point, with firmware version 01.06.0006.22, does not properl...
red-teaming-auto-mode
Red-teaming Claude Code's auto-mode monitor Code for the paper Red-teaming Claude Code's auto-mode monitor. Production coding-agent monitors e.g. Claude Code's Auto Mode or Codex's Guardian review each action and block unsafe ones in real time. This repository red-teams them under a persistent...
CVE-2020-25270
CVE-2020-25270 PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, City Vendor - PHPGurukul Product -https://phpgurukul.com/hostel-management-system V2.1 Vulnerability Type - Cross Site Scripting XSS Addition Information - XSS wil...
BAS-Guardian
⚠️ Repository Archived This repository has been archived and is no longer maintained. All development continues in the unified ICS OT Protector monorepo: https://github.com/spinfosecurity/ics-ot-protector Where to find this scanner Former repo| New location ---|--- Energy-Grid-Protector|...
Least-Privilege Auditing of Agent Tool Calls with Intent Graphs and Reasoning-Guided Escalation
LLM agents that call tools are exposed to indirect prompt injection: instructions hidden in tool outputs can steer an agent into calls the user never asked for. We present a runtime audit that derives an executable intent graph from the user's objective and the deployment's tool catalog with one...
CVE-2026-33924 Authenticated RCE in update functionality in Guardian/CMC before 26.4.0
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...
CVE-2026-33924
Two OS command injection vulnerabilities exist in the Guardian/CMC update installation functionality, affecting versions before 26.4.0 . The root cause is the insufficient validation of update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle ...
CVE-2026-33924 Authenticated RCE in update functionality in Guardian/CMC before 26.4.0
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...
CVE-2026-33923 Update bundle signature bypass in Guardian/CMC before 26.4.0
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...
CVE-2026-33923 Update bundle signature bypass in Guardian/CMC before 26.4.0
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...
CVE-2026-33923
A signature verification vulnerability exists in the update installation functionality of Guardian/CMC prior to version 26.4.0 . The root cause is the inconsistent validation of update bundle contents, allowing an attacker with administrative privileges to remotely supply a crafted bundle. While ...
Authenticated RCE in update functionality in Guardian/CMC before 26.4.0
Summary Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. Impact An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes...
Nozomi Networks Guardian encryption issue vulnerability
Versions prior to Nozomi Networks Guardian 26.4.0 and CMC 26.4.0 contain an encryption vulnerability. This vulnerability stems from inconsistent validation of update package contents by the update installation functionality. As a result, attackers with administrative privileges can remotely deliv...
Nozomi Networks Guardian command injection vulnerability
Versions prior to Nozomi Networks Guardian 26.4.0 and Nozomi Networks CMC 26.4.0 contain a command injection vulnerability. This vulnerability stems from insufficient validation of update package contents by the update installation functionality; it is susceptible to OS command injection attacks...
Update bundle signature bypass in Guardian/CMC before 26.4.0
Summary A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. Impact An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but...
Maian Guardian license generator command injection RCE
Admin ajax-ops=generate — shell expansion in projid writes marker under content/ and runs attacker command. """Maian Guardian license generator command injection RCE.""" from future import annotations import re import uuid from urllib.parse import urlencode from kittysploit import from...
Maian Guardian 2.1 - OS Command Injection in the License Generator (`guardianLic — Detect
Fingerprint / reachability check for Maian Guardian 2.1 - OS Command Injection in the License Generator guardianLicense::create CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Maian Guardian 2.1 - OS Command Injection in the License Generator guardianLicense::create CW""" from...
