nimux

Kit de enumeración de red y ejecución remota en Nim puro nimux - Kit de herramientas nativas para operadores nimux es una superficie de comandos nativa para evaluaciones de seguridad autorizadas. Combina enumeración de red, descubrimiento web ligero, validación de credenciales, operaciones de...

AMBER-ICI

AMBER ICI v5 AMBER ICI AMBER Investigative Command Interface is a local-first browser interface for investigative and analytical workflows powered by a local Ollama server. It includes: A single-model Analyst Console and multi-model Parallel execution A user-defined agent chain driven from the ma...

awesome-dfir-skills

🔥 awesome-dfir-skills Una colección impulsada por la comunidad de habilidades de DFIR / respuesta a incidentes: prompts reutilizables, flujos de trabajo y archivos auxiliares que ayudan a los profesionales a moverse más rápido, mantenerse consistentes y, quizás—solo quizás—dormir un poco. 🚀 Inici...

PraisonAI - Authentication Bypass

PraisonAI 2.5.6 to 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server. id: CVE-2026-44338 info: name: PraisonAI -...

github-logs

GitHub Logs Extracting OSINT Insights from 15TB of GitHub Event Logs We've developed 3 Trickest workflows that processed and enriched the entire GitHub Event Logs dataset, giving us some valuable insights. Now, the entire community can benefit from these results. Did you know that exactly 16 GitH...

osmedeus

Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...

agentic-radar

A Security Scanner for your agentic workflows! View Demo · Documentation · Report Bug · Request Feature Table of Contents 1. Description 2. Agentic Visualizer 3. Getting Started Prerequisites Installation 4. Advanced Installation CrewAI Installation OpenAI Agents Installation 5. Usage 6. Advanced...

Aura-State

Aura-State Prove your AI agent is injection-safe, in-spec, and won't act out of bounds — before you ship it. A design-time verifier for LLM agents — not a runtime guardrail. Import your LangGraph / CrewAI / AutoGen / MCP agent and Aura proves five things about the agent you already wrote, then...

n8n-RCE

n8n RCE PARCHE Ejecución Remota de Código a través de Workflows de n8n Basado en CVE-2025-68613 ⚠️ Hecho solo con fines educativos 📚 Instalación y Uso 🛠️ $ git clone https://github.com/AbdulRKB/n8n-RCE.git $ cd n8n-RCE $ pip install -r requirements.txt $ python exploit.py -u -e -p...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

quiver

Quiver : Una meta-herramienta para Kali Linux Quiver es un espacio de nombres organizado de funciones de shell que prellenan comandos en tu terminal para que puedas dejar de depender de notas, copiar, pegar, editar, copiar y pegar nuevamente. Quiver te ayuda a recordar cómo usar cada herramienta ...

GHSA-GFHX-HW2G-V5HG vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-97711 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-GFHX-HW2G-V5HG vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-97711 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-55251

The NetBox Device Type Library is vulnerable to arbitrary code execution on its CI runner. A contributor with no special repository access could open a pull request modifying requirements.txt , .pre-commit-hooks-config.yaml / .pre-commit-yamlfmt-config.yaml , or .gitmodules files. The CI workflow...

Research-CVE-2026-21858

CVE-2026-21858 Ni8mare: n8n Authentication Bypass & Remote Code Execution 1. OverviewVulnerability Name: Ni8mare CVE ID: CVE-2026-21858 CVSS Score: 10.0 Critical Vulnerability Type: Authentication Bypass, Local File Inclusion LFI, Remote Code Execution RCE Affected Versions: n8n versions 1.65.0 a...

PoC-CVE-2026-21858

PoC-CVE-2026-21858 n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remo...

CVE-2026-103257

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the n8n node that fails to validate resource identifiers. Attackers can craft malicious resource IDs to redirect API calls to unintended resources, allowing unauthorized...

CVE-2026-103257

The automation platform n8n is vulnerable to a path traversal vulnerability in versions prior to 1.123.80, 2.39.6, and 2.40.1. The root cause is a failure to validate resource identifiers within the n8n node. An attacker can craft malicious resource IDs to redirect API calls to unintended targets...