numasec

numasec 오픈소스 AI 보안 에이전트. 터미널에 보안 두뇌를 부여하세요. 로컬 도구, 에이전트, 런북, 발견 항목, 증거, 재생 및 보고서로 보안 워크플로우를 실행하세요. npm install -g numasec 데모 | 왜 | 사용감 | 사용해보기 | 기능 | 명령어 | 아키텍처 | 로드맵 numasec이란 무엇인가? numasec은 터미널에서 실행되는 AI 보안 에이전트입니다. 이미 머신에 설치된 도구를 사용하며, 보안 런북을 따르고, 사이버 에이전트 간 전환하고, 작업 컨텍스트를 유지하며, 발견 항목을 추적하고, 증...

trust-my-agent-ai

🛡️ TrustMyAgent OpenClaw 에이전트를 위한 보안 보디가드 웹사이트 • 트러스트 센터 • 빠른 시작 • 기여하기 OpenClaw 에이전트를 위한 EDR 스타일의 보안 에이전트입니다. 14개 도메인에 걸쳐 41개의 보안 검사를 실행하고 신뢰 점수0100를 계산하며, 중앙 집중식 트러스트 센터 대시보드로 텔레메트리를 전송하여 사람과 다른 에이전트가 신뢰성을 확인할 수 있도록 합니다. 무상태Stateless 설계 – 메모리에서만 실행되며 로컬에 아무것도 저장하지 않고 호스트에 흔적을 남기지 않습니다. Why AI...

Orbit Tracer

Orbit Tracer インテリジェントなセキュリティ修復のための Orbit Tracer セキュリティエージェント AI と Orbit のナレッジグラフを使用して、コードベース全体のセキュリティ脆弱性分析、リスク評価、修復を自動化 問題 セキュリティチームは重大な課題に直面しています:脆弱性の発見は速い。しかし修正には永遠に時間がかかる。 Manual vulnerability remediation workflow: 1. SAST scan finds vulnerability 5 minutes 2. Security engineer analyzes impact...

CVE-2026-97662

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

EUVD-2026-90975

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

CVE-2026-97662 Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

CVE-2026-97662

The AWS security-agent-mcp-server (versions before 0.2.0 ) is vulnerable to an argument injection issue within the diff scan operation . A threat actor can provide a crafted reference value to this operation, potentially allowing them to create, overwrite, or truncate arbitrary files on the host ...

CVE-2026-97662 Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

PT-2026-103965

Name of the Vulnerable Software and Affected Versions AWS security-agent-mcp-server versions prior to 0.2.0 Description An argument injection issue exists in the diff scan operation. A threat actor can provide a crafted reference value to the diff scan operation to create, overwrite, or truncate...

CVE-2026-97662: Improper Neutralization of Argument Delimiters in a Command

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

The Model Proposes, the Code Disposes: A Pre-Registered Ablation of a Verifier-And-Acceptance Stage in an LLM-Orchestrated Offensive-Security Agent

We evaluate whether a verifier-and-acceptance stage - a model verifier whose verdicts are enforced by deterministic code - changes what an LLM-driven offensive-security agent reports. We report a 15-run exploratory pilot, a pre-registered 20-run confirmatory ablation, and a pre-registered 2 x 2...

CVE-2026-87913

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

CVE-2026-87913 Missing S3 bucket ownership verification in the AWS Security Agent MCP server

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

EUVD-2026-75571

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

CVE-2026-87913

The AWS Security Agent MCP server prior to version 0.2.0 is vulnerable to a missing S3 bucket ownership verification , allowing remote attackers to obtain the private source archive of a scanned workspace — including credentials and infrastructure state — by registering a storage bucket whose nam...

CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...

CVE-2026-87912

CVE-2026-87912 affects the AWS Security Agent plugin in Amazon aws-agents-for-devsecops prior to version 1.1.0. A missing S3 bucket ownership verification allows a remote attacker to obtain the private source archive of a scanned workspace—potentially exposing credentials and infrastructure state...

CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...

CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...

CVE-2026-87912: Unverified Ownership

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...