Tools

inertfluid/sk-cve-2026-26030-lab

Ethical, network-isolated Docker lab reproducing CVE-2026-26030 — Semantic Kernel in-memory vector store filter eval() RCE (patched in 1.39.4)

sastraadiwiguna-purpleeliteteaming/llamastack-rce-deterministic-supply-chain-exploitation-hardening-framework-cve-2024-50050-

LlamaStack-RCE: Deterministic Supply Chain Exploitation & Hardening Framework [CVE-2024-50050] Focus on AI Security Research…

1numak1/cve-2025-31337

CVE-2025-31337 Security Advisory - Critical Buffer Overflow in AI Chatbot Framework

lcfr-hax/cve-2024-14027_slop

Exploits for CVE-2024-14027 creating using AI/Claude as a test.

spiralbl0ck/ai_hacking

Collection of CVE(work) on tenserflow binary pwning it

chamsbouzaiene/ai-vuln-rediscovery-nginx-cve-2026-42945

Reproducible AI-assisted vulnerability rediscovery of CVE-2026-42945 in nginx, including technical analysis, PoC trigger, and patch validation for…

cyhe50/cve-2025-32434-poc

Proof-of-concept exploit for CVE-2025-32434, a pickle deserialization vulnerability in PyTorch's weights_only mode, demonstrating malicious tar file…

rooobeam/pickle-deserialization-exploit-in-transformers

This study analyzes Python pickle deserialization vulnerabilities, focusing on CVE-2024-3568 in Hugging Face Transformers' TFAutoModel. We reproduce…

chaitanyagarware/cve-2026-54519

Public advisory landing page for CVE-2026-54519: missing ownership checks in ai-agent-automation memory APIs enabling cross-user memory read and…

spaceraccoon/vulnerability-spoiler-alert

A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often…

cogensec/gideon

Autonomous security operations agent for threat intelligence, vulnerability research, IOC analysis, and red teaming. Supports dual-mode operations…

sushant-me/agentic-workflow-injection

Reproducible vulnerable and fixed GitHub Actions fixtures for agentic workflow injection (CVE-2026-44246), with measured detector coverage and…

daryllundy/cve-2025-32711

PowerShell-based detection and remediation toolkit for CVE-2025-32711 (EchoLeak), a critical zero-click AI command injection vulnerability in…

sushank05/mcp-doorman

A lightweight mcp to prevent poisoning CVE (CVE-2025-54136), researchers hijacking Claude Code/Copilot/Gemini via prompt injection, and hundreds of…

zeltoc/threat-intel-brief-cve-2026-42208-litellm

Threat intelligence brief on CVE-2026-42208, a critical pre-auth SQL injection in BerriAI LiteLLM exploited within 36 hours of disclosure. Covers…

openexecution-coder/demo-cve-2026-4821

Demonstrates AI agent-driven CVE remediation with cryptographic provenance tracking, showcasing detection, analysis, human approval, and verification…

balajigund/research-on-cve-2025-9998

vulnerability in CVE 2025-9998 and solution for those vulnerability with help artificial intelligence