burpgpt

!IMPORTANT Announcing the launch of BurpGPT Pro, the edition specifically tailored to meet the needs of professionals and cyber boutiques. Discover a host of powerful features and a user-friendly interface that enhances your capabilities and ensures an optimal user experience. To access these...

PraisonAI AgentOS - Information Disclosure

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

CVE-2026-42203

LiteLLM CVE-2026-42203 PoC Istruzioni per l'uso Questo documento spiega come avviare un ambiente LiteLLM locale ed eseguire CVE-2026-42203.py per verificare la vulnerabilità SSTI /prompts/test. Utilizzare solo in un ambiente di laboratorio locale autorizzato. Non puntare lo script verso target...

React19-fix-vibecoders

Prompt di correzione della sicurezza per React 19 e Next.js per agenti AI 🚨 VULNERABILITÀ DI SICUREZZA CRITICA - CVE-2025-55182 e CVE-2025-66478 Questa repository contiene prompt riutilizzabili per aiutare gli assistenti di codifica AI a correggere automaticamente vulnerabilità di sicurezza...

dataset

🚀 CySecBench: Dataset di prompt incentrati sulla cybersecurity basato su IA generativa per il benchmarking dei modelli linguistici di grandi dimensioni 🛡️ Il più grande e completo dataset di prompt incentrati sulla cybersecurity basato su IA generativa per il benchmarking dei modelli linguistici d...

CVE-2026-82280 Quivr Prompt Endpoints Missing Ownership Validation

Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting all brain users...

CL4R1T4S

CL4R1T4S AI सिस्टम्स ट्रांसपेरेंसी और ऑब्जर्वेबिलिटी सभी के लिए! OpenAI, Google, Anthropic, xAI, Perplexity, Cursor, Windsurf, Devin, Manus, Replit और भी बहुत कुछ – लगभग सभी प्रमुख AI मॉडल + एजेंटों से पूरी तरह से निकाले गए सिस्टम प्रॉम्प्ट, दिशानिर्देश और उपकरण 📌 यह क्यों मौजूद है root@kitploit:...

system_prompts_leaks

Come visto su The Washington Post: Scopri le regole nascoste dietro l'IA. Poi usale per riscrivere questo articolo. 11 maggio 2026 Fughe di System Prompt Lo scopo di questa repository è documentare le istruzioni dei System Prompt per tutti i chatbot AI disponibili - Claude, ChatGPT, Gemini ecc...

BrokenHill

Broken Hill documentation Table of contents 1. Prerequisites 2. Setup 3. Use 4. Options you will probably want to use frequently 5. Examples 6. Observations and recommendations 7. Extracting result information 8. Notes on specific models Broken Hill has been tested against 9. Troubleshooting 10...

redeval

RedEval - Framework di Valutazione della Sicurezza per LLM Un framework completo per valutare la sicurezza dei Large Language Model LLM attraverso test sistematici di attacco e rifiuto. RedEval fornisce una piattaforma unificata, sicura ed estensibile per valutare la robustezza degli LLM contro...

awesome-dfir-skills

🔥 awesome-dfir-skills Eine community-getriebene Sammlung von DFIR / Incident Response Skills : wiederverwendbare Prompts, Workflows und Hilfsdateien, die Praktikern helfen, schneller zu arbeiten, konsistent zu bleiben und vielleicht – nur vielleicht – etwas Schlaf zu bekommen. 🚀 Schnellstart 1...

Astra Linux – Vulnerability in Firefox and Thunderbird

If a user installed an extension of a particular type, the extension might automatically update itself. During this process, it could bypass the prompt that grants the new version the newly requested permissions. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91.6...

Astra Linux – Vulnerability in Firefox and Thunderbird

In several cases, browser prompts might have been obscured by pop-ups controlled by content. This could lead to potential user confusion and spoofing attacks. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...

Astra Linux – Vulnerability in Firefox and Thunderbird

The truncation of a long URL could have allowed for origin spoofing in a permission prompt. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

Community-Security-Prompts

Este repositorio nao tem um README...

promptmap

root@kitploit: O O o.-. Humans, Do Not Resist! |/ ,-'-. / /, / /|.-.| / --O-- .--""" /\ /\ | o.o / Utku Sen's /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /||| ./|||,| .// / / |-----| || || || || promptmap2 is a an automated prompt injection scanner for...

PT-2026-76679

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /add prompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...

Malicious code in @xiaohhhh1/canvas-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34add291ef7584aec7041449cb2e80d36ae98f93c2725e1aa018707e3334119 On bin start, @xiaohhhh1/canvas-agent opens an outbound WebSocket to the hardcoded relay wss://canvas.xiaohhhh1.com/api/agent-relay and treats inboun...

Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b1477c5187703dab87d6be6933d62de4c4244ab3340586f85b530e05470aa1 Package ships an agent daemon vanexa-agent start, entry bin/vanexa-agent.js that receives commands from a remote phone app and executes them on the...

Malicious code in @ccfly/setup-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5a88a77e76664c9050d9bad333214c053469264fff83ba56e2a68eaecfdfaa The tarball ships a single 6.4 MB Go binary at bin/ccfly-setup for darwin/arm64. The binary links github.com/gorilla/websocket and...