strot

Die interne API jeder Website mit natürlicher Sprache reverse-engineeren Das Problem Moderne Websites laden Daten durch versteckte AJAX-Aufrufe: Die Daten sind nicht im HTML – sie werden über interne APIs abgerufen Sie müssen Netzwerkanfragen manuell inspizieren Komplexe Paginierungslogik, die in...

endgame

ENDGAME C2 FRAMEWORK ENDGAME è un framework professionale di comando e controllo costruito per impegni di red team autorizzati, test di penetrazione e ricerca sulla sicurezza educativa. Progettato per simulare tecniche avversarie realistiche, valutare la copertura di rilevamento e aiutare i team ...

reconpal

ReconPal: Sfruttare la NLP per la Sicurezza Informatica La fase di ricognizione è una delle più importanti, apparentemente semplice ma che richiede molto impegno e abilità per essere eseguita correttamente. Bisogna conoscere gli strumenti giusti, le query/sintassi corrette, eseguire quelle query,...

Zetsu

Un sistema RAG personale offline per la conoscenza della sicurezza offensiva. Ingestisci i tuoi writeup, soluzioni di lab, report di bug bounty e blog di sicurezza, poi interroga in linguaggio naturale durante gli engagement. Nessun cloud, nessun SaaS, la tua conoscenza rimane tua. Cosa fa ZETSU...

Reversecore_MCP

Reversecore MCP Engenharia Reversa e Análise de Segurança com IA via Model Context Protocol Um servidor MCP que oferece a assistentes de IA como Claude e Cursor a capacidade de realizar engenharia reversa, análise de malware, pesquisa de vulnerabilidades, perícia digital e auditoria de código-fon...

finalrun-agent

finalrun.app • Documentazione • Blog • Lista d'attesa dispositivo cloud • Unisciti alla community Slack Seguici su finalrun-agent è un CLI basato su AI che testa le tue app Android e iOS usando linguaggio naturale. Scrivi un test in inglese semplice in YAML, FinalRun avvia la tua app su un...

OGhidra

OGhidra 3 - Ghidra के साथ AI-संचालित रिवर्स इंजीनियरिंग क्लॉड-प्रेरित ऑर्केस्ट्रेटर का उपयोग करने वाले संस्करण के लिए, देखें https://github.com/llnl/OGhidra/tree/orchestrator OGhidra बड़े भाषा मॉडलों को Ghidra के रिवर्स इंजीनियरिंग प्लेटफॉर्म से जोड़ता है, जिससे प्राकृतिक भाषा के माध्यम से...

CVE-2026-12372

A flaw was found in NLTK. A Server-Side Request Forgery SSRF vulnerability allows an attacker to influence a URL passed to NLTK's network-loading helpers. This occurs because the nltk.pathsec.validatenetworkurl function fails to properly identify and reject IP addresses within the RFC 6598 shared...

Linux Distros Unpatched Vulnerability : CVE-2026-12261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

EUVD-2026-52226

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

SUSE CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

Linux Distros Unpatched Vulnerability : CVE-2025-71408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls...

EUVD-2025-210509

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

DEBIAN-CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

UBUNTU-CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

CVE-2025-71408

The CVE-2025-71408 issue affects NLTK up to version 3.9.2 (pre-3.9.3). The vulnerability lies in nltk.collocations’ main path, where command‑line arguments are passed directly to eval() to form BigramAssocMeasures suffixes without a allowlist or sanitization, enabling an attacker who can control ...