redthread

RedThread Find the exploit. Judge it. Draft the fix. Prove what changed. RedThread is a CLI-first framework for testing LLM systems, validating failures, and turning confirmed vulnerabilities into evidence-backed defense candidates. It is built for teams who need more than a one-off jailbreak dem...

CVE-2026-123273

Versions of ImageMagick before 7.1.2-35 and 6.9.13-60 are vulnerable to an infinite loop within the SVG decoder . The root cause is located in QueueAuthenticPixelCacheNexus in MagickCore/cache.c , which fails to validate the requested region's width and height. An attacker can provide a crafted S...

CVE-2026-110931

A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management. The issue occurs when the parser handles a specific element called AuthorityBinding within an authentication statement. Due to an incomplete fix for a previous vulnerability, the parser...

CVE-2026-107602

A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution. The issue occurs when the parser encounters unexpected elements within a security token's key information section, causing the processing thread to enter an infinite loop. An...

BrokenFlow

BrokenFlow A simple PoC to invoke an encrypted shellcode by using an hidden call. Introduction This code uses a simple trick to hide the instruction that effectively will jump to our shellcode. This should make the static analysis or emulation more challenging. As always, if this concept was...

EUVD-2026-117566

A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management. The issue occurs when the parser handles a specific element called AuthorityBinding within an authentication statement. Due to an incomplete fix for a previous vulnerability, the parser...

CVE-2026-110931

A flaw exists in the Keycloak SAML 1.1 assertion parser, specifically when processing the AuthorityBinding element within an authentication statement. Due to an incomplete fix for a prior vulnerability, the parser can enter an infinite loop that exhausts all available memory. This results in an u...

CVE-2026-107602

A flaw exists in the SAML 1.1 XML parsing logic of Keycloak , an open-source identity and access management solution. When the parser encounters unexpected elements within a security token's key information section , the processing thread enters an infinite loop . An unauthenticated remote attack...

EUVD-2026-117565

A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution. The issue occurs when the parser encounters unexpected elements within a security token's key information section, causing the processing thread to enter an infinite loop. An...

auto-re-agent

re-agent Autonomous reverse-engineering agent — source-aware reverser/checker loop, objective verifier, parity engine, and Ghidra backend. Overview Demo: YouTube re-agent automates a reverse-engineering workflow by combining a reverser/checker loop with Ghidra decompilation through...

node9-proxy

🛡️ node9 Access control for AI agents Your AI agents can reach Slack, GitHub, email, and your database. node9 decides what they may do with each one. Credential jail · secrets and PII · destructive git, SQL and shell held for review · MCP tool pinning · network egress allowlist · loop breaker · on...

sdk

@cosignet/sdk Thin, zero-dependency TypeScript client for Cosignet — human-in-the-loop approval for high-risk AI-agent actions, with payload-bound passkey signatures. Put a human in the loop before a dangerous action runs: pause it, get an explicit passkey approval from a person Face ID / Touch I...

hermes-agent

Hermes Agent ☤ Hermes Agent | Hermes Desktop The self-improving AI agent built byNous Research. It's the only agent with a built-in learning loop — it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a...

killerbee

KillerBee KillerBee is a Framework and Tools for Testing & Auditing ZigBee and IEEE 802.15.4 Networks Notice usb0.x support is being deprecated/removed Apimote v1 support is being deprected/removed If you require these features please create an issue to explain your usecase and requirements...

sgn

SGN is a polymorphic binary encoder for offensive security purposes such as generating statically undetecable binary payloads. It uses a additive feedback loop to encode given binary instructions similar to LFSR. This project is the reimplementation of the original Shikata ga nai in golang with...

GitGot

Description GitGot is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive secrets. How it Works During search sessions, users will provide feedback to GitGot about search results to ignore, and GitGot prunes the set of...

CVE-2026-33969

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service...

CVE-2026-33969

A vulnerability exists in the NAS Authentication Request message decoding procedure due to a missing lower bound check . This flaw causes an infinite loop , resulting in a Denial of Service (DoS) . Specific affected products or software versions are not provided in the documentation. No exploit i...

EUVD-2026-117275

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service...

CVE-2026-122305

Kyverno versions prior to 1.19.2 are vulnerable to a Denial of Service (DoS) flaw within the substituteVariablesIfAny function. The root cause is an unbounded substitution loop triggered by self-referential variable templates. A low-privileged attacker can exploit this by creating resources with ...