Guardrails
nvidia-nemo/guardrailsProgrammable guardrails for LLM chat apps: enforce input/output rails, block jailbreaks and prompt injections, detect hallucination, and mask…
ai-securityanomaly-detectiondefensive-tools+3
7.0k
nvidia-nemo/guardrailsProgrammable guardrails for LLM chat apps: enforce input/output rails, block jailbreaks and prompt injections, detect hallucination, and mask…
ac8999/cve-2025-5880PoC for a Path Traversal vulnerability in Whistle v2.9.98 via the /cgi-bin/sessions/get-temp-file endpoint. (Unpatched)
talha-nazeef-ahmed/alpc-enumeratorA Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.
george0papasotiriou/cve-2026-23002-5g-nas-message-buffer-overflow-in-gnodebSimulated 5G gNodeB NAS parser with stack buffer overflow PoC for CVE-2026-23002; a crafted NAS message triggers remote code execution.
george0papasotiriou/cve-2026-22019-libcurl-http-2-connect-tunnel-mixupSimulates CVE-2026-22019, a libcurl HTTP/2 CONNECT tunnel stream-isolation failure, demonstrating cross-stream data injection and response smuggling…
george0papasotiriou/cve-2026-22012-diameter-protocol-credit-control-bypass-in-5gPython simulation of CVE-2026-22012, showing how a missing Final-Unit-Indication in Diameter Credit-Control allows unlimited quota and service bypass…
hackspeak/cve-2026-66066PoC exploit for Rails Active Storage/libvips CVE-2026-66066: uses crafted MAT/HDF5 files for arbitrary file read, recovers secret_key_base, and…
shinthink/cve-2026-66066Exploit for CVE-2026-66066 against Rails Active Storage/libvips: pre-auth arbitrary file read to recover SECRET_KEY_BASE and achieve RCE, with…
george0papasotiriou/cve-2026-11114-node.js-vm-sandbox-escape-via-proxyPoC exploit for CVE-2026-11114 demonstrating Node.js vm sandbox escape via Proxy to achieve remote code execution against a vulnerable HTTP /eval…
george0papasotiriou/cve-2026-6060-quic-handshake-amplification-via-address-validation-bypassEducational Python PoC for a QUIC address-validation bypass that triggers handshake amplification, including vulnerable server simulation and attack…
rails/rails-forensics-cve-2026-66066Forensic toolkit and agent skills for investigating Rails Active Storage/libvips CVE-2026-66066: detects crafted blob indicators, exposure windows,…
0xblackash/cve-2026-66066Educational analysis of CVE-2026-66066: Pre-auth RCE in Rails Active Storage libvips. Includes detection rules, IOCs, and mitigation guidance.
zer0sumgam3/cve-2026-66066-pocReproducible lab for CVE-2026-66066: file-read-to-RCE exploit chain via Ruby on Rails Active Storage and libvips HDF5 matload. Includes Python…
paveg/rails-activestorage-vips-auditAgent skill that audits a Rails codebase for CVE-2026-66066 (KindaRails2Shell) — Active Storage + libvips arbitrary file read / RCE, checking Rails…
theopaid/cve-2026-67184-unauthenticated-null-pointer-dereference-crashes-the-server-tinyweb-Detailed security advisory and proof-of-concept for CVE-2026-67184, a NULL pointer dereference in TinyWeb leading to denial of service.
wildwestcybersecurity/cve-2019-5420-pocProof-of-concept exploit for CVE-2019-5420, demonstrating remote code execution in Ruby on Rails via ActiveSupport deserialization. Generates signed…
blacklanternsecurity/badsecretsA library for detecting known secrets across many web frameworks
