CVE-2024-37054
bardlaudian/cve-2024-37054Proof-of-concept that poisons MLflow registered models via the REST API, embedding a malicious pickle to trigger RCE when the model is loaded.
ai-securitydefensive-toolsexploitation+6
bardlaudian/cve-2024-37054Proof-of-concept that poisons MLflow registered models via the REST API, embedding a malicious pickle to trigger RCE when the model is loaded.
cisco-ai-defense/skill-scannerSecurity Scanner for Agent Skills
mdshoaibuddinchanda/zombieguardML-based detection of Zombie ZIP archive header evasion attacks (CVE-2026-0866)
promptfoo/modelauditSecurity scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment
gherardofiori/maliciousbrowserextensionsThis Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…
rushter/hexoraStatic analysis of malicious Python code
zhengxr930/malevalOfficial code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing
iqsec-lab/freemocaMemory-free continual learning framework for malware classification using mode connectivity-based interpolation. Supports class-incremental and…
umpolungfish/byvalvertakes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities
trailofbits/anamorpherimage scaling attacks for multi-modal prompt injection
xueboqiu/prohunterGraph-based threat detection system using inexact graph vector matching to compare threat graphs with CTI-derived attack query graphs for automated…
cyhe50/cve-2025-32434-pocProof-of-concept exploit for CVE-2025-32434, a pickle deserialization vulnerability in PyTorch's weights_only mode, demonstrating malicious tar file…
andyshaw01/poisoncraftThis repository provides the official implementation of POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models.
otrf/security-datasetsRe-play Security Events
mandiant/stringsifterA machine learning tool that ranks strings based on their relevance for malware analysis.
cossas/certitudeCERTITUDE - A python package to classify URLs as malicious or benign
lucamassarelli/yarasafeSAFE embeddings to match functions in yara