Watcher

AI 기반 자동화 사이버보안 위협 탐지 플랫폼 Watcher는 AI 기반 위협 인텔리전스 분석 을 통해 새로운 사이버보안 위협을 발견하고 모니터링하도록 설계된 Django & React JS 플랫폼입니다. 웹 서버에 배포하거나 Docker를 통해 빠르게 실행할 수 있습니다. Watcher 기능 Watcher는 포괄적인 위협 탐지 및 모니터링으로 보안 운영을 강화합니다: AI 기반 위협 인텔리전스 - 원시 위협 데이터를 실행 가능한 인텔리전스로 변환: 상위 5개 트렌드 사이버보안 주제에 대한 자동화된 주간 요약, 위협 발생 시...

searxng

.. SPDX-License-Identifier: AGPL-3.0-or-later .. 메타검색 엔진: https://en.wikipedia.org/wiki/Metasearchengine .. 설치 가이드: https://docs.searxng.org/admin/installation.html .. 설정 가이드: https://docs.searxng.org/admin/settings/index.html .. CONTRIBUTING:...

DorXNG

DorXNG 🔎🌎 DorXNG는 고급 검색 엔진 연산자를 여러 업스트림 검색 제공자를 통해 활용하여 OSINT 데이터를 수집하는 현대적인 솔루션입니다. 백엔드에서는 목적에 맞게 제작된 SearXNG 컨테이너 이미지를 사용합니다. SearXNG는 자체 호스팅 가능하고, 해킹이 가능하며, 개인 정보 보호에 중점을 둔 메타 검색 엔진입니다. 당사의 SearXNG 구현은 모든 검색 쿼리를 Tor 네트워크를 통해 라우팅하며, Tor의 MaxCircuitDirtiness 구성 지시문을 사용하여 10초마다 회로를 새로 고칩니다. 또한...

morty

Morty 웹 콘텐츠 살균 프록시 서비스 Morty는 악성 HTML 태그와 속성을 제거하도록 웹 페이지를 재작성합니다. 또한 타사 정보 유출을 방지하기 위해 외부 리소스 참조를 대체합니다. Morty의 주요 목표는 searx에 대한 결과 프록시를 제공하는 것이지만, 독립형 살균 서비스로도 사용할 수 있습니다. 기능: HTML 살균 HTML/CSS 외부 참조를 로컬로 재작성 JavaScript 차단 쿠키 전달 안 함 리퍼러 전송 안 함 캐싱/Etag 없음 GET/POST 양식 및 IFrame 지원 서비스 남용 방지를 위한 선택적...

CVE-2026-58485

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread receives its caller-controlled URL through src/index.ts and validates only the literal hostname in assertUrlAllowed within src/url-reader.ts...

CVE-2026-58483

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread in src/index.ts passes a caller-supplied URL to readUrlContent in src/url-reader.ts, where checkContentLength treats a missing Content-Length...

CVE-2026-54688

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, weburlread passes a caller-supplied URL to the server-side fetch path while assertUrlAllowed in src/url-reader.ts runs only when MCPHTTPHARDEN is enable...

CVE-2026-54689

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, the weburlread URL policy in src/url-reader.ts can be bypassed while MCPHTTPHARDEN is enabled and MCPHTTPALLOWPRIVATEURLS is not enabled because redirec...

CVE-2026-58483

mcp-searxng , a Model Context Protocol server for SearXNG integration, is vulnerable to denial of service in versions prior to 1.7.1 . The web_url_read function in src/index.ts passes a caller-supplied URL to readUrlContent() in src/url-reader.ts, where checkContentLength() treats a missing Conte...

EUVD-2026-79124

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread in src/index.ts passes a caller-supplied URL to readUrlContent in src/url-reader.ts, where checkContentLength treats a missing Content-Length...

CVE-2026-58483 mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread in src/index.ts passes a caller-supplied URL to readUrlContent in src/url-reader.ts, where checkContentLength treats a missing Content-Length...

CVE-2026-58483 mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread in src/index.ts passes a caller-supplied URL to readUrlContent in src/url-reader.ts, where checkContentLength treats a missing Content-Length...

CVE-2026-58483 mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread in src/index.ts passes a caller-supplied URL to readUrlContent in src/url-reader.ts, where checkContentLength treats a missing Content-Length...

EUVD-2026-78924

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread receives its caller-controlled URL through src/index.ts and validates only the literal hostname in assertUrlAllowed within src/url-reader.ts...

CVE-2026-58485 mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread receives its caller-controlled URL through src/index.ts and validates only the literal hostname in assertUrlAllowed within src/url-reader.ts...

CVE-2026-58485 mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread receives its caller-controlled URL through src/index.ts and validates only the literal hostname in assertUrlAllowed within src/url-reader.ts...

CVE-2026-58485

mcp-searxng , a Model Context Protocol server providing AI assistants web search and URL-reading via SearXNG, is vulnerable to Server-Side Request Forgery (SSRF) in the web_url_read tool prior to version 1.7.1 . The assertUrlAllowed() function in src/url-reader.ts performs only a lexical hostname...

CVE-2026-58485 mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread receives its caller-controlled URL through src/index.ts and validates only the literal hostname in assertUrlAllowed within src/url-reader.ts...

CVE-2026-54688

CVE-2026-54688 is a Server-Side Request Forgery (SSRF) in mcp-searxng , a Model Context Protocol server providing AI assistants with web search and URL-reading via SearXNG. Prior to 1.2.0 , the web_url_read tool passes a caller-supplied URL to a server-side fetch path, but the internal-address gu...

CVE-2026-54688 mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, weburlread passes a caller-supplied URL to the server-side fetch path while assertUrlAllowed in src/url-reader.ts runs only when MCPHTTPHARDEN is enable...