modo

Modo The open-source AI IDE that plans before it codes. MIT License · Quick Start · What Modo Adds · Contributing I wanted a small feature in an AI coding tool. Couldn't find a way to suggest it. So I asked myself: how hard is it to actually build something like Kiro, Cursor, or Windsurf? Turns o...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

pentest-a2p2v-core

LISEZ-MOI Automated Attack Path Planning and Validation A2P2V est un outil de planification et de cyberattaque qui offre aux utilisateurs la capacité de déterminer un ensemble de séquences d'attaque classées en fonction d'un objectif spécifique de l'attaquant. Le but de l'outil est de simplifier ...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

redteam-plan

🔥 🚒 Планирование Red Team упражнения Этот документ помогает информировать планирование red team, проводя контраст с очень специфическим стилем red team, описанным в Red Teams. Этот метод выражает несколько предубеждений для оптимизации ценности и энтузиазма blue team. Он специально избегает попыт...

CVE-2026-104853

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package...

CVE-2026-104853

The monorepo solution Nx is vulnerable to a path traversal vulnerability in versions 13.10.0 through 22.7.10 and 23.2.1 . During migration planning, the software reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A host...

K000163494: PostgreSQL vulnerability CVE-2026-6469

Security Advisory Description Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongl...

CVE-2024-38856-ApacheOfBiz

CVE-2024-38856-ApacheOfBiz Apache OFBiz is an open source enterprise resource planning system. It provides a suite of enterprise applications that integrate and automate many of the business processes of an enterprise. CVE-2024-38856 is a pre-authentication flaw in Apache OFBiz that can lead to...

MSMQ-Vulnerability

MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...

IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection

IBM Planning Analytics versions 2.0.0 through 2.0.8 are vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. id: CVE-2019-4716 info: name: IBM Planning Analytics - Authentication Bypass & Remote...

BIT-MONGODB-2026-82066 Heap Out-of-Bounds Read in MongoDB Server Query Planning Component

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. T...

Security Bulletin: IBM Planning Analytics Connector for SAP is affected by security vulnerabilities

Summary IBM Planning Analytics Connector for SAP is affected by security vulnerabilities Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with ...

Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local v2.0 - IBM Planning Analytics Workspace version 2.1.22. Vulnerability Details CVEID:CVE-2026-41417...

Astra Linux – Vulnerability in PostgresSQL 11

Incomplete tracking of tables with row security in PostgreSQL allows a reused query to view or modify different rows than intended. CVE-2023-2455 and CVE-2016-2193 addressed most issues related to interactions between row security and changes to user IDs. However, they did not cover cases where a...

CVE-2026-71644

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

EUVD-2026-76112

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

CVE-2026-71644

A vulnerability exists in Robotics-STAR-Lab (SYSU STAR Group) RACER (affected version: commit abcdef1234567890 ) due to a missing default case in the FSM . This flaw prevents the system from stopping the publication of swarm trajectories when a drone enters the IDLE state, which can lead to unsaf...

PT-2026-89877

Name of the Vulnerable Software and Affected Versions Robotics-STAR-Lab SYSU STAR Group RACER Tested version commit abcdef1234567890 Description A missing default case in the Finite State Machine FSM prevents the publishing of swarm trajectories when a drone enters the IDLE state. This flaw can...

CVE-2026-71644: Access of Resource Using Incompatible Type

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...