RHSA-2026:60854 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

NPMAnalysis

Introducción Recientemente, los incidentes de seguridad relacionados con ataques de envenenamiento de NPM han ido apareciendo uno tras otro. Cuando ocurren este tipo de incidentes, los paquetes NPM afectados suelen ser eliminados o retirados del registro de NPM, lo que dificulta el análisis de...

cve-2023-43208-poc

Mirth Connect PoC Script Simple Python script for security research related to Mirth Connect vulnerabilities. Important Use this project only on systems you own or have explicit written permission to test. Unauthorized testing is illegal. Files exploit.py — main script Requirements Python 3.9+...

CVE-2026-86180

creationtimestamp| type| source ---|---|--- 2026-09-06 09:36:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ezbipv4pvvcct...

fides

使用信息流控制保护 AI 智能体 该仓库包含一个 Jupyter notebook，用于配合学术论文《使用信息流控制保护 AI 智能体》。该 notebook 以教程形式组织，引导读者理解论文中介绍的概念。它展示了在智能体任务中确定性执行安全策略的机制的实际实现，并将概念转化为可执行的代码，供读者实验。 设置说明 该 notebook 已使用 Azure OpenAI Chat Completions API 针对 GPT-4o 和 GPT-4.1 进行了测试，但也可以轻松适配为使用 OpenAI 端点。代码通过 .env 配置文件（包含 AZUREENDPOINT、APIVERSION...

PyRIT v1.1.0

Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. Check out our website for more information...

CVE-2026-24118

⚠️ Aviso Legal e Investigación de Seguridad 📌 Propósito de Este Repositorio Este repositorio se proporciona estrictamente solo con fines educativos, académicos y de investigación autorizada en ciberseguridad. Está destinado a apoyar la comprensión de: Conceptos de vulnerabilidades de seguridad y...

NextJS-CVE-2025-29927-Docker-Lab

🚨 NextJS-CVE-2025-29927-Docker 实验室 此仓库包含一个基于 Docker 的实验环境 ，用于在受控设置中探索和演示 Next.js CVE-2025-29927 漏洞。 ⚠️ 免责声明： 此实验室仅用于教育和安全研究目的。请勿将其暴露于公共互联网或用于生产环境。 📦 特性 ✅ 存在漏洞的 Next.js 应用程序 ✅ 使用 Docker 容器化 ✅ 专为本地测试 CVE-2025-29927 设计 ✅ 包含预配置的路由和 UI ✅ 易于设置和运行 🛠 先决条件 确保已安装以下软件： Docker（v20+） Git 可选：Node.js（若要在 Docker...

ECHO-7550-C016-C10C

Bulletin has no description...

ECHO-84B0-6123-3737

Bulletin has no description...

ECHO-0F8B-361A-A003

Bulletin has no description...

ECHO-BC26-FE28-C8E1

Bulletin has no description...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

awesome-ai-security

awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the...

NoiseHound

NoiseHound...

Sandb0x-Xtract0r

SandB0x-Xtract0r...

awesome-web3-security

awesome-web3-security A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below,...

Zeek-Intelligence-Feeds

Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible. Getting Started These instructions will get you a copy of the project up and running. Dependencies ZEEK 3.0 or...