nuguard v0.9.1

NuGuard Open Source NuGuard is an open source AI application security toolkit. Its goal is to provide the most extensive redteaming and behavioral validation of Agentic AI applications. With NuGuard, AI developers can focus on building their applications while NuGuard continuously tests and...

mcp-doorman

mcp-doorman Шлюз безопасности для MCP-серверов — каждый вызов инструмента проверяется на входе. CI npm License: Apache-2.0 PR приветствуются mcp-doorman — это прокси, который встраивается между вашим AI-агентом Claude Desktop, Claude Code, Cursor, VS Code, любой MCP-клиент и используемыми...

intentshield

IntentShield Don't filter what your AI says. Filter what it's about to do Pre-execution intent verification for AI agents. Why This Exists...

CVE-2026-81485

linkedin-ads-mcp (danielpopamd) version 1.0.0 is affected by a path traversal vulnerability in the Media Upload component. The root cause is the fs.readFileSync function in src/tools/campaign-management.ts, where the filePath argument is not properly validated, allowing a remote attacker to read ...

EUVD-2026-66832

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2026-81485 danielpopamd linkedin-ads-mcp Media Upload campaign-management.ts fs.readFileSync path traversal

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2026-81485 danielpopamd linkedin-ads-mcp Media Upload campaign-management.ts fs.readFileSync path traversal

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2026-48282

CVE-2026-48282-POC CVE-2026-48282 Adobe ColdFusion के Remote Development Service RDS में एक path traversal भेद्यता है, जिसका CVSS स्कोर 10.0 Critical है। यह बिना प्रमाणीकरण के हमलावरों को /CFIDE/main/ide.cfm एंडपॉइंट के माध्यम से मनमानी फ़ाइलें पढ़ने और लिखने की अनुमति देता है, जिससे Remote Code...

log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell Schwachstellen-Demoprojekt Dies ist ein Demoprojekt zum Erlernen und Erforschen der Log4j2 Remote-Codeausführungsschwachstelle Log4Shell. ⚠️ Sicherheitswarnung Dieses Projekt dient ausschließlich Sicherheitsforschung und Bildungszwecken. Nicht in...

DakshSCRA

Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

forticrack_v8

Forticrack v8.0.0 FortiOS 8.0.0 फर्मवेयर इमेज को डिक्रिप्ट और एक्सट्रैक्ट करें। यह स्क्रिप्ट Bishop Fox के Forticrack को विस्तारित करती है ताकि 8.0.0 फर्मवेयर इमेज का समर्थन किया जा सके। साथ ही, FortiGate 7.4.7 फर्मवेयर एन्क्रिप्शन पर RandoriSec का लेख FortiOS 8.0.0 के एन्क्रिप्शन को रिवर्स करने...

SessionView

SessionView Un'applicazione console C leggera per enumerare e visualizzare tutte le sessioni utente su Windows Server, inclusi i GUID delle sessioni. Caratteristiche Enumerazione completa delle sessioni : Elenca tutte le sessioni attive sul server Windows Informazioni dettagliate sulla sessione :...

CVE-2026-0770

🚀 CVE-2026-0770 – Langflow RCE execglobal PoC Vulnerabilidade de Execução Remota de Código no Langflow 📌 Software Afetado Esta vulnerabilidade afeta: Langflow 🧠 Visão Geral da Vulnerabilidade CVE-2026-0770 é uma vulnerabilidade de Execução Remota de Código RCE no endpoint: root@kitploit:...

CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit

CVE-2026-50751 - Эксплойт обхода аутентификации Check Point IKEv1 ⚠️ ВАЖНОЕ ПРЕДУПРЕЖДЕНИЕ Этот код ТОЛЬКО для образовательных целей и авторизованных тестов безопасности. Неавторизованное использование против систем без явного разрешения НЕЗАКОННО. Автор не несет ответственности за неправильное...

LearnDash

LearnDash Sqli LearnDash = 4.25.6 - Iniezione SQL Admin+ Descrizione Il plugin WordPress LearnDash con versione inferiore alla 4.25.6 è vulnerabile a un'iniezione SQL Admin+. Dettagli Tipo : plugin Slug : sfwd-lms Versione interessata : Punteggio CVSS : 9.8 Valutazione CVSS : Critico Vettore CVSS...

pico-usb-wifi

= pico-usb-wifi :toc: macro :toclevels: 3 :idprefix: :idseparator: - pico-usb-wifi è un firmware per il Raspberry Pi Pico W che lo trasforma in un adattatore Wi-Fi USB senza driver, enumerandosi come dispositivo USB CDC-NCM. :figure-caption: AI Slop .Diagramma di pico-usb-wifi...

CVE-2026-23744-script

Ein Skript für CVE-2026-23744, das MCPJam Inspector Versionen = 1.4.2 ausnutzt. Basierend auf dem hier verwendeten curl-Befehl: https://github.com/advisories/GHSA-232v-j27c-5pp6 Stellen Sie sicher, dass Ihre /etc/hosts-Datei korrekt ist und auf die Domain/den vhost des Ziels zeigt...

Sigma-Rules

Sigma-Rules Le regole generate dai nostri report pubblici vengono ora contribuite direttamente al progetto SigmaHQ. Puoi trovare le regole relative ai nostri report utilizzando la ricerca seguente. Disponiamo anche di un ruleset Sigma privato per i clienti; se sei interessato a una demo o...

sanitize

Sanitize Sanitize è un sanitizzatore HTML e CSS basato su allowlist. Rimuove tutto l'HTML e/o CSS da una stringa, tranne gli elementi, gli attributi e le proprietà che scegli di consentire. Utilizzando una semplice sintassi di configurazione, puoi dire a Sanitize di consentire determinati element...