Masterchef

إطار ماسترشيف 👨‍🍳 أداة الاختراق الأكثر لذة 👩‍🍳 قيد التطوير... ماسترشيف هي أداة رسومية لاستغلال الثغرات والتحقق منها، تساعدك على تقسيم سير عمل اختبار الاختراق الخاص بك عن طريق إنشاء وصفات لذيذة. إنها الأداة المثالية للبدء في عالم الأمن السيبراني الهجومي. مرئية، بديهية، قابلة للتخصيص، ومع الكثير من...

google-osconfig-privesc

Zusammenfassung Der googleosconfigagent-Prozess ist ein Bestandteil der GoogleCloudPlatform-Toolings https://github.com/GoogleCloudPlatform/osconfig und läuft standardmäßig auf jeder VM. Der Agent läuft als root und ist für einige benutzergesteuerte Dienste verantwortlich, einschließlich OS confi...

CVE-2026-25991

CVE-2026-25991 PoC - Tandoor Recipes SSRF Proof-of-Concept per SSRF tramite Importazione Ricette Divulgazione: Originariamente segnalata da me tramite GHSA-j6xg-85mh-qqf7 ⚠️ Solo per test di penetrazione/ricerca autorizzati. Informazioni sulla Vulnerabilità...

CVE-2026-25964

CVE-2026-25964 PoC - Tandoor Recipes LFI Autenticato Proof-of-Concept per Divulgazione Locale di File Autenticata tramite Importazione Ricette Divulgazione: Originariamente segnalata da me tramite GHSA-6485-jr28-52xx ⚠️ Solo per test di penetrazione/ricerca autorizzati. Informazioni sulla...

CVE-2026-55533

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, createauthmiddleware allows requests when auth=api-key lacks PRAISONAIAPIKEY or JWT authentication lacks PRAISONAIJWTSECRET. An externally bound Recipe server can therefore accept unauthenticated POST /v1/recipes/run requests...

CVE-2026-55533

PraisonAI is a multi-agent teams system. Prior to version 4.6.58 , the create_auth_middleware() function in the Recipe server exhibits a fail-open behavior: when auth=api-key is configured but the PRAISONAI_API_KEY environment variable is unset, or when JWT authentication is configured but PRAISO...

CVE-2026-55533 PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, createauthmiddleware allows requests when auth=api-key lacks PRAISONAIAPIKEY or JWT authentication lacks PRAISONAIJWTSECRET. An externally bound Recipe server can therefore accept unauthenticated POST /v1/recipes/run requests...

CVE-2026-55533 PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, createauthmiddleware allows requests when auth=api-key lacks PRAISONAIAPIKEY or JWT authentication lacks PRAISONAIJWTSECRET. An externally bound Recipe server can therefore accept unauthenticated POST /v1/recipes/run requests...

EUVD-2026-65523

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, createauthmiddleware allows requests when auth=api-key lacks PRAISONAIAPIKEY or JWT authentication lacks PRAISONAIJWTSECRET. An externally bound Recipe server can therefore accept unauthenticated POST /v1/recipes/run requests...

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

Summary PraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset. This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

CVE-2025-56795

CVE-2025-56795 Descrizione Sono state identificate due vulnerabilità di Cross-Site Scripting XSS persistente nella funzionalità di creazione di ricette di Mealie , che interessano tutte le versioni fino alla 3.0.1 inclusa. L'input utente non sanificato fornito durante la creazione di una ricetta...

recipe-blog-encoding

recipe-blog-encoding !WARNING Questo progetto è interamente vibe-coded probabilmente parzialmente plagiato da questo repository e l'autore è un dumb-dumb che ha solo pensato che l'idea fosse divertente Usa i preamboli di ricette SEO-gaming come veicolo per codificare messaggi segreti il prompt pu...

CVE-2026-73361

Unauthenticated Cross Site Scripting XSS in Recipe Card Blocks for Gutenberg & Elementor = 3.4.18 versions...

CVE-2026-73361

Unauthenticated reflected/stored XSS affects Recipe Card Blocks for Gutenberg & Elementor WordPress plugin through version 3.4.18; CVSS 7.1 HIGH (network, no auth, user interaction required). No exploitation details provided; update to a newer plugin version when available.

CVE-2026-73361 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.18 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Recipe Card Blocks for Gutenberg & Elementor = 3.4.18 versions...

CVE-2026-73361

Unauthenticated Cross Site Scripting XSS in Recipe Card Blocks for Gutenberg & Elementor = 3.4.18 versions...

EUVD-2026-60785

Unauthenticated Cross Site Scripting XSS in Recipe Card Blocks for Gutenberg & Elementor = 3.4.18 versions...

CVE-2026-55522

PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow "include" feature is vulnerable to code execution. Workflow.executeinclude implicitly imports and runs an included recipe's tools.py via a raw...

CVE-2026-55522 PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow "include" feature is vulnerable to code execution. Workflow.executeinclude implicitly imports and runs an included recipe's tools.py via a raw...

CVE-2026-55522

CVE-2026-55522 – PraisonAI workflow include bypasses tools.py autoload . Affected: PraisonAI versions 3.9.26–4.6.57 and PraisonAIAgents 0.12.12–1.6.57. The workflow include feature (Workflow._execute_include) imports and executes a recipe’s tools.py via importlib.util.spec_from_file_location() an...