11 matches found
Cl0neMast3r
Cl0neMast3r About: Cl0neMast3r is a Python script that was coded to make your life easier. Now you can easily choose your favorite tools from GitHub and install them on your system with one click. Even better you can ensure that you have latest version of your favorite tools. All this and more yo...
Some-Tools
Some-Tools Manage all your pentest tools in one place and keep them up to date with one command 😎 The goal of sometools is to be able to manage all your tools that are not include in Kali or that sudo apt install is not available. Sometools works better if tools are a repo but it can be tweak to...
ptf
渗透测试者框架 PTF 一个 TrustedSec 项目 - 版权所有 2022 作者：David Kennedy @HackingDave https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave 渗透测试者框架 PTF 是一个 Python 脚本，专为基于 Debian/Ubuntu/ArchLinux 的发行版设计，旨在创建类似且熟悉的渗透测试发行版。作为渗透测试者，我们习惯于使用 /pentest/ 目录或我们自己经常需要保持最新状态的工具集。我们有一些经常使用的“首选”工具，使用最新最好的版本非常重要。 PTF...
CVE-2026-18593
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...
EUVD-2026-52222
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...
CVE-2026-18593 vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...
CVE-2026-18593
Vulnerability CVE-2026-18593 affects vxcontrol PentAGI up to version 2.1.0. It targets an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl within the Tool Management Protocol Handler. The issue can be exploited remotely to cause sandbox-related problems; exploitation is descr...
CVE-2026-45395
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the tool update endpoint POST /api/v1/tools/id/id/update is missing the workspace.tools permission check that is present on the tool create endpoint. This allows a user who has been...
CVE-2026-44284
FastGPT (before 4.14.17) had an SSRF flaw in MCP tool URL handling. An authenticated user with permission to create/manage MCP toolsets could store an internal endpoint (e.g., http://localhost:3000/mcp) via the MCP tool create/update endpoints. The stored URL could be used later by the backend wo...