NemoClaw

NVIDIA NemoClaw: Reference Stack for Sandboxed AI Agents in OpenShell NVIDIA NemoClaw is an open source reference stack for running supported AI agents more safely inside NVIDIA OpenShell sandboxes. It provides guided onboarding, managed inference, network policy, managed integrations,...

SkillSpector

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. In the 31,132-skill analyzed...

poc-cve-2024-0132

poc-cve-2024-0132 Reproduce Env: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Reproduce Step: run the poc container image Target: Access host files in the container Call docker daemon apis via the docker.sock in the container Reproduce use the prebuilt poc...

Guardrails

NVIDIA NeMo Guardrails Library LATEST RELEASE / DEVELOPMENT VERSION : The develop branch tracks the latest top of tree development. The latest released version is 0.24.1. ✨✨✨ 📌 The official NeMo Guardrails library documentation is available atdocs.nvidia.com/nemo/guardrails. ✨✨✨ NVIDIA NeMo...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – Fully Weaponized NVIDIA Container Toolkit Exploit References https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

basalt

!DOI 10.5281/zenodo.22072811https://img.shields.io/badge/DOI-10.5281/zen...

sass-king

SASS King Reverse engineering NVIDIA SASS from controlled kernels to production audits. Article 1 · Article 2 · Knowledge base · Pattern library · SM120 instruction glossary · Encoding notes · Start here · Project structure · Tensor-core chapters · Contributing SASS King is a systematic...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...

Flowise - NVIDIA NIM Endpoints Missing Authentication

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router /api/v1/nvidia-nim/ is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generati...

colabcat

Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

hashcrack

hashcrack unpacks some hash types, picks sensible options and invokes hashcat NVIDIA drivers here: http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk alt email: [email protected] if you need support I'm not sure if anyone at NCC will be looking after this, but I'll be doing active dev in...

Security update for nvidia-open-driver-G07-signed (important)

openSUSE security update: security update for nvidia-open-driver-g07-signed ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22106-1 Rating: important References: bsc1270255 bsc1271601 bsc1278022 bsc1280057 bsc1283265 Cross-References: CVE-2026-47489...

nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media (moderate)

nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media Announcement ID: openSUSE-SU-2026:12061-1 Rating: moderate Cross-References: CVE-2026-47491 CVE-2026-47492 CVE-2026-47500 CVE-2026-47501 CVE-2026-47504 CVE-2026-47510 CVE-2026-47511 CVE-2026-47514 CVE-2026-47522 CVE-2026-47523...

CVE-2025-23266

CVE-2025-23266 Author: Mark Mallia Target platform: Ubuntu 22.04, FastAPI v2.4.3 → patched to v2.5.1 on 2025‑10‑02 1 – In a nutshell: what does this attack involve FastAPI’s parserequest routine copies HTTP request headers into a small buffer that lives on the caller’s stack. If an attacker sends...

CVE-2023-31014_Lab

CVE-2023-31014 Implicit Intent Hijacking Lab An educational Android Lab created based on the public report of CVE-2023-31014 in NVIDIA GeForce NOW for Android. It does not include NVIDIA source code, actual Action strings, or real authentication credentials. Facts confirmed from the public report...

GPU_ShellCode

gpu poisoning; hide the payload inside the gpu memory. after my older repo, in which i used the thread description to hide the payload, i wanted to find new way, so now im using nividia gpu memory using cuda api's to allocate, write, and free when there is no need for the payload to be found in...

GhostLock-NVIDIA-Shield-9.2.4

GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 port of the GhostLock futex PI use-after-free CVE-2026-43499 for the 2019 NVIDIA Shield TV Pro mdarcy running Shield Experience 9.2.4. The payload changes the credentials of the live ADB daemon, so new ADB shells are UID 0 without a...

nvidia-gpu-security-poc

NVIDIA GPU driver — two findings NVIDIA closed as expected behavior Proof-of-concept code and raw evidence for two findings in the NVIDIA Linux GPU driver, both reported through NVIDIA's VDP and both closed by NVIDIA as intended/expected behavior. Published so the behaviour is documented and...