open-source-llm-scanners

open-source-llm-scanners GitHub上按星标排序的开源LLM安全扫描器列表。不提供深入分析。 最低需要10个星标作为门槛 😁 相关：open-source-web-scanners LLM扫描器 能够发现LLM应用中一系列漏洞的工具。 项目主页| 最近提交| 贡献者| 星标 ---|---|---|--- Promptfoo| | | garak| | | Giskard| | | LLM Web应用扫描器 使用LLM发现Web应用中一系列漏洞的工具。 相关链接 https://github.com/kaplanlior/oss-llm-security...

fast-security-scanners

高速セキュリティスキャナー/チェック コミュニティへの小さな貢献 : これらのツールはすべて、セキュリティ評価と当社の脆弱性モニタリングサービスで使用しています。 DNS NSテイクオーバーのチェック リポジトリ docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover キャッシュポイズニング リポジトリ docker run --rm -it --name wcdscanner -e VULNID=wcd -e FINDXSS=False -e...

cve-2021-3007-vulnerable

CVE-2021-3007 漏洞测试环境 用于验证安全扫描器中 CVE-2021-3007 检测的故意存在漏洞的测试环境。 漏洞概述 属性| 值 ---|--- CVE ID| CVE-2021-3007 严重性| 严重（CVSS 9.8） 类型| 不安全的反序列化 → 远程代码执行 影响版本| Laminas HTTP 2.14.2, Zend Framework 3.0.0 CWE| CWE-502（不可信数据反序列化） 快速开始 root@kitploit: Clone repository git clone...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: beats-fips, trivy, dagger, spire-server, aws-otel-collector, aws-otel-collector-fips, falcoctl-fips, syft, elastic-agent, prometheus-fips, docker-cli-buildx, buildkitd-fips, openfga-fips, docker-compose, grype-fips, cadvisor-fips, chainctl, k9s-fips, cg, grype,...

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts. Every skill security scanner the firm tested it against marked it safe. The payload was harmless by...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, tigera-operator, helm-fips, crossplane-fips, kots, cloudbeat, spegel, buildkitd-fips, headlamp, neuvector-scanner, kube-mgmt, linkerd2, spegel-fips, chainctl-fips, grype, zarf-fips, ctop, kube-arangodb-fips, k3s, syft-fips,...

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code

How do security scanners perform on real-world code? We present RealVuln, the first open-source benchmark comparing Rule-Based SAST, General-Purpose LLMs, and Security-Specialized scanners on 26 intentionally vulnerable Python repositories educational and Capture-The-Flag applications with 796...

Unpacking Security Scanners for GitHub Actions Workflows

GitHub Actions is a widely used platform that allows developers to automate the build and deployment of their projects through configurable workflows. As the platform's popularity continues to grow, it has become a target of choice for recent software supply chain attacks. These attacks exploit...

Malicious Package

Overview eslint-plugin-unicorn-ts-2 is a malicious package. This package uses typosquatting techniques, which are intended to trick users into downloading and installing the malicious package instead of the intended legitimate one. The malicious payload attempts to exfiltrate sensitive data from...

Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools

Cybersecurity researchers have disclosed details of an npm package that attempts to influence artificial intelligence AI-driven security scanners. The package in question is eslint-plugin-unicorn-ts-2, which masquerades as a TypeScript extension of the popular ESLint plugin. It was uploaded to th...

SUSE CVE-2025-54059

melange allows users to build apk packages using declarative pipelines. Starting in version 0.23.0 and prior to version 0.29.5, SBOM files generated by melange in apks had file system permissions mode 666. This potentially allows an unprivileged user to tamper with apk SBOMs on a running image,...

melange's world-writable permissions expose SBOM files to potential image tampering

It was discovered that the SBOM files generated by melange in apks had file system permissions mode 666: $ apkrane ls https://packages.wolfi.dev/os/x8664/APKINDEX.tar.gz -P hello-wolfi --full --latest | xargs wget -q -O - | tar tzv 2/dev/null var/lib/db/sbom drwxr-xr-x root/root 0 2025-06-23 14:1...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions due to world-writable permissions set on SBOM files in the file system. An attacker can modify or delete SBOM files by gaining local access to the running image, which may confuse security scanners or disru...

CVE-2025-54059 melange creates SBOM files in APKs with world-writable permissions

melange allows users to build apk packages using declarative pipelines. Starting in version 0.23.0 and prior to version 0.29.5, SBOM files generated by melange in apks had file system permissions mode 666. This potentially allows an unprivileged user to tamper with apk SBOMs on a running image,...

SecuSphere - Efficient DevSecOps

SecuSphere is a comprehensive DevSecOps platform designed to streamline and enhance your organization's security posture throughout the software development life cycle. Our platform serves as a centralized hub for vulnerability management, security assessments, CI/CD pipeline integration, and...

Cross Site Scripting (XSS) Identifies NetScaler Redirect VIP as Vulnerable

NetScaler Virtual IP VIP configured for redirect is being labeled as vulnerable by Security Scanners for Cross Site Scripting XSS...

SUSE-SU-2023:2932-1 Security update for python-pip

This update for python-pip fixes the following issues: - Removed .exe files from the RPM package, to prevent issues with security scanners bsc1212015...

PT-2023-36233 · Unknown · Python-Pip

Name of the Vulnerable Software and Affected Versions: python-pip affected versions not specified Description: The issue with python-pip is related to the presence of .exe files in the RPM package, which could cause problems with security scanners. Recommendations: At the moment, there is no...

PT-2023-36234 · Unknown · Python-Pip

Name of the Vulnerable Software and Affected Versions: python-pip affected versions not specified Description: The issue with python-pip is related to the presence of .exe files in the RPM package, which could cause problems with security scanners. Recommendations: At the moment, there is no...

CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...