7737 matches found
CVE-2025-67743
Local Deep Research is an AI-powered research assistant for deep, iterative research. In versions from 1.3.0 to before 1.3.9, the download service downloadservice.py makes HTTP requests using raw requests.get without utilizing the application's SSRF protection saferequests.py. This can allow...
EUVD-2025-204778
Local Deep Research is Vulnerable to Server-Side Request Forgery SSRF in Download Service...
MAL-2025-192859 Malicious code in security-testing-research- (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f34b8854e99d88612993478ac4dfc68adae6ccc14b803326db34b25357ec90 The package security-testing-research- was found to contain malicious code...
Malicious code in security-testing-research- (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f34b8854e99d88612993478ac4dfc68adae6ccc14b803326db34b25357ec90 The package security-testing-research- was found to contain malicious code...
MAL-2025-192849 Malicious code in oneday-worm-research (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cc173214371a2dfaa01a87455b2deadd72f9169e423a8d14da6553747fdbdc The package oneday-worm-research was found to contain malicious code...
Malicious code in oneday-worm-research (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cc173214371a2dfaa01a87455b2deadd72f9169e423a8d14da6553747fdbdc The package oneday-worm-research was found to contain malicious code...
Server-side Request Forgery (SSRF)
Overview local-deep-research is an AI-powered research assistant with deep, iterative analysis using LLMs and web searches Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the downloadservice.py service. An attacker can access internal services and attempt ...
CVE-2025-67743
CVE-2025-67743 affects Local Deep Research. The vulnerability lies in the download service (download_service.py) where HTTP requests are made with raw requests.get() without SSRF protection, bypassing safeguards in safe_requests.py/ssrf_validator.py. This can allow an attacker to access internal ...
Local Deep Research 安全漏洞
Local Deep Research is an AI search assistant open-sourced by LearningCircuit. A security vulnerability exists in Local Deep Research version 1.3.0 through versions prior to 1.3.9 that stems from the download service not using SSRF protection, which could lead to a server-side request forgery...
📄 Dahua TPC-AEBF5201 P2P Camera ToolsComplete Security Analysis Suite
This PHP proof-of-concept provides defensive tooling to analyze DH-P2P / Easy4IP behaviors observed during DFIR activities. It includes routines to decrypt Account1SecEData, derive device-specific cryptographic keys, and reproduce authentication code generation logic. The project is intended to...
RAPTOR - Autonomous Offensive/Defensive Security Research Framework
RAPTOR is an autonomous offensive/defensive security research framework, based on Claude Code. It empowers security research with agentic workflows and automation. RAPTOR stands for Recursive Autonomous Penetration Testing and Observation Robot...
vulnerability-research
Vulnerability Re...
Quantigence: A Multi-Agent AI Framework for Quantum Security Research
Cryptographically Relevant Quantum Computers CRQCs pose a structural threat to the global digital economy. Algorithms like Shor's factoring and Grover's search threaten to dismantle the public-key infrastructure PKI securing sovereign communications and financial transactions. While the timeline...
Towards a Systematic Taxonomy of Attacks against Space Infrastructures
Space infrastructures represent an emerging domain that is critical to the global economy and society. However, this domain is vulnerable to attacks. To enhance the resilience of this domain, we must understand the attacks that can be waged against it. The status quo is that there is no systemati...
The Role of AI in Modern Penetration Testing
Penetration testing is a cornerstone of cybersecurity, traditionally driven by manual, time-intensive processes. As systems grow in complexity, there is a pressing need for more scalable and efficient testing methodologies. This systematic literature review examines how Artificial Intelligence AI...
Exploit for CVE-2025-66478
PoC for Next.js Vulnerability. Credits where credits are d...
Exploit for Deserialization of Untrusted Data in Facebook React
$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $...
Evolving our approach to coordinated security research: In scope by default
Today at Black Hat Europe, I raised our commitment to customer security through our partnerships with the security research community...