ReconAIzer

ReconAIzer ReconAIzerは、OpenAIを活用してバグバウンティハンターが偵察プロセスを最適化するのを支援する、強力なJython拡張機能です。この拡張機能はさまざまなタスクを自動化し、セキュリティ研究者が脆弱性を特定して悪用するのをより簡単かつ迅速にします。 インストール後、ReconAIzerはコンテキストメニューと結果を確認するための専用タブを追加します： 前提条件 Burp Suite Jython Standalone Jar インストール 以下の手順に従って、ReconAIzer拡張機能をBurp Suiteにインストールします。...

BinAIVulHunter

BinAIVulHunter Un plugin per IDA PRO che aiuta a trovare vulnerabilità nei binari. Usa il decompilatore HexRays di IDA PRO con OpenAI ChatGPT per trovare possibili vulnerabilità nei binari. Disclaimer: le risposte che si ottengono cercando vulnerabilità nei binari usando un'IA possono generare...

MobSF_AI

MobSF AI Sidecar Este projeto adiciona um assistente de chat com IA ao Mobile Security Framework MobSF. Ele permite que analistas de segurança façam perguntas sobre o relatório de análise gerado pelo MobSF diretamente na interface, utilizando o modelo da OpenAI. Funcionalidades Integração Perfeit...

PT-2026-35087

Name of the Vulnerable Software and Affected Versions langchain-openai versions prior to 1.1.14 Description The url to size helper function, utilized by get num tokens from messages for image token counting, contains a Time-of-Check to Time-of-Use TOCTOU flaw. The function validates URLs for...

WordPress plugin BetterDocs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

LangChain 代码问题漏洞

LangChain is an open-source framework developed by LangChain for creating applications powered by large language models LLMs. Versions of LangChain prior to 1.1.14 contained code vulnerabilities. These vulnerabilities stemmed from the urltosize helper function in langchain-openai, which, after...

CVE-2026-25083

GROWI OpenAI thread/message API endpoints expose authorization gaps: a logged-in user can view or tamper another user’s threads/messages if they know the shared AI assistant’s identifier. Affected versions are v7.4.5 and earlier. No remediation details are provided in the connected documents. The...

WordPress AI Engine Information Disclosure Vulnerability

WordPress AI Engine is a plugin based on OpenAI technology, which is mainly used to integrate artificial intelligence features into WordPress websites to improve the efficiency of content generation, automated operations and so on. WordPress AI Engine suffers from an information disclosure...

WordPress plugin AI Engine 信息泄露漏洞

WordPress AI Engine is a plugin based on OpenAI technology, which is mainly used to integrate artificial intelligence features into WordPress websites to improve the efficiency of content generation, automated operations and so on. WordPress AI Engine suffers from an information disclosure...

CVE-2024-0452

The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openaifileuploadcallback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above...