🧰 Python

The items that name it 269

• “Black October” for AI Developer Platforms
  writeupas classification.technologies2026-10-30
• Earliest Known PolinRider Malware Found in 2025 npm Packages
  writeupas classification.technologies2026-10-30
• Muse pdfdetach POC
  videoas technologies2026-10-30

  Invoked during document reading and analysis operations

• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas affected products2026-10-29It is written here as Python (requests, httpx and Scrapy load or install Brotli).

  requests, httpx and Scrapy load or install Brotli

• Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps
  articleas classification.technologies2026-10-29
• Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder
  writeupas affected products2026-10-29It is written here as Python (HTTP clients decode Brotli automatically when Brotli or brotlicffi is installed).

  HTTP clients decode Brotli automatically when Brotli or brotlicffi is installed

• eMudhra, Brotli, and the Long Tail of a Security Fix
  articleas classification.technologies2026-10-26
• AI, Scripts, Operator: Inside the ConnectWise Attack
  writeupas classification.technologies2026-10-26
• Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
  articleas classification.technologies2026-10-26
• Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
  advisoryas classification.technologies2026-10-25
• Bye Bye Brotli? Google's Compression Library Is a Security Mess
  articleas classification.technologies2026-10-25
• Prasenjit Sarkar (@stretchcloud) on X
  threadas classification.technologies2026-10-24
• Everything, everywhere, all at once… the week software broke | Endor Labs
  articleas classification.technologies2026-10-24
• Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497)
  advisoryas classification.technologies2026-10-23
• Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
  writeupas classification.technologies2026-10-23
• Python Packages Vulnerable to Node2Shell
  writeupas classification.technologies2026-10-23
• eMudhra / emSign CA Compromise: What Python, pip, and CI/CD Users Need to Update
  articleas classification.technologies2026-10-22
• Spectrmachina/Ztrust
  repoas classification.technologies2026-10-22
• EMudhra Intermediate CA Certificates Compromised
  advisoryas classification.technologies2026-10-22
• Muscle AI (@themuscleai) on X
  threadas classification.technologies2026-10-22
• eMudhra CA Compromise: The Trust Stores You Didn't Patch | Endor Labs
  articleas classification.technologies2026-10-21
• LiteLLM 1.107.0 Compromised: Python Startup Hooks Steal Cloud, AI, and Proxy Credentials | Endor Labs
  writeupas classification.technologies2026-10-21
• Billy Lee (@billyozno) on X
  threadas classification.technologies2026-10-21
• litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader
  writeupas classification.technologies2026-10-21
• LiteLLM Compromised, Steals Credentials
  writeupas classification.technologies2026-10-21
• LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials
  writeupas classification.technologies2026-10-21
• LiteLLM 1.107.0 PyPI Wheel Contains a Credential Stealer and Persistent Python Backdoor
  writeupas classification.technologies2026-10-21
• LiteLLM compromised again: infostealer and RAT found in version 1.107.0
  writeupas classification.technologies2026-10-21
• Cyber Detective💙💛 (@cyb_detective) on X
  repoas classification.technologies2026-10-21
• JFrog Security (@JFrogSecurity) on X
  advisoryas classification.technologies2026-10-21
• A company that vouches for websites had secret keys so weak that 8 of them were cracked
  articleas classification.technologies2026-10-21
• LiteLLM supply chain compromise: What you need to know
  writeupas classification.technologies2026-10-21
• eMudhra Intermediate CA Compromise
  articleas classification.technologies2026-10-20
• Show HN: VoidAccess – open-source dark web OSINT, from query to a graph
  repoas classification.technologies2026-10-20
• ☣ KitPloit - Hacker Tools (@KitPloit) on X
  repoas classification.technologies2026-10-20
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-20
• ConnectWise Suspends Cloud Services in Response to Cyberattack
  articleas classification.technologies2026-10-19
• Steven Daugherty (@StevenDaugherty) on X
  threadas classification.technologies2026-10-17
• Bravish (@bravish_) on X
  toolas classification.technologies2026-10-17
• Claude reveals ECDSA curve origins
  writeupas classification.technologies2026-10-16
• Open-Source Intelligence (OSINT): Turn One Username into a Full Digital Dossier with Maigret
  articleas classification.technologies2026-10-16
• GitHub Action tj-actions/changed-files supply chain attack: what you need to know | Endor Labs
  articleas classification.technologies2026-10-16
• Why Your SCA is Always Wrong | Endor Labs
  articleas affected products2026-10-16It is written here as Python (phantom dependencies, misused dependency scopes, direct use of transitive dependencies, unused dependencies).

  phantom dependencies, misused dependency scopes, direct use of transitive dependencies, unused dependencies

• gichirimaku/wp2shell-PoC
  repoas classification.technologies2026-10-15
• ♫Why♥Not♪ (@Python_s_) on X
  advisoryas classification.technologies2026-10-13
• Phillip Shoemaker (@pbsIdentity) on X
  threadas classification.technologies2026-10-12
• 2024 Dependency Management Report | Endor Labs
  paperas classification.technologies2026-10-12
• Is AI Coding Safe? Introducing the Agent Security League | Blog | Endor Labs
  articleas classification.technologies2026-10-12
• Malicious 'Pyronut' Package Backdoors Telegram Bots with Remote Code Execution | Blog | Endor Labs
  writeupas classification.technologies2026-10-12
• I Found a $90k Remote Code Execution Vulnerability in Google
  writeupas tools2026-10-12It is written here as Python (base64, json, zlib scripts to decode the Flask session cookie).

  base64, json, zlib scripts to decode the Flask session cookie

• sakidekin/CVE-2026-41940-PoC
  repoas classification.technologies2026-10-11
• Trail of Bits (@trailofbits) on X
  toolas classification.technologies2026-10-09
• The OpenSourceMalware Show #24
  talkas classification.technologies2026-10-09
• Bypass Web Application Firewall (WAF) with EvilWAF
  articleas classification.technologies2026-10-08
• Top MCP security resources — October 2026
  articleas classification.technologies2026-10-08
• DITTO: A Context-aware Pickle-based Pre-Trained Model Scanner for Effective Security Audits
  paperas classification.technologies2026-10-07
• Applying Security by Design at the Point of Execution: How Governed Security Requirements Affect the Security of AI-Generated Code
  paperas classification.technologies2026-10-07
• Kubernetes Agent Sandbox on AWS EKS (Step-by-Step Guide)
  writeupas classification.technologies2026-10-07
• GitHub Copilot CLI vulnerability: Cryptographic Context Injection steals developer secrets
  writeupas classification.technologies2026-10-06
• Show HN: MailAccess – the true Email OSINT framework
  toolas classification.technologies2026-10-06
• CITRIX 0-DAY EXPLOITS: CVE-2026–88771 & CVE-2026–88772 IN THE WILD
  writeupas classification.technologies2026-10-06
• lee1981 (@lee1981b) on X
  writeupas classification.technologies2026-10-06
• Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access
  writeupas classification.technologies2026-10-06
• Ayyaz (@ayyazdev) on X
  threadas classification.technologies2026-10-05
• Malicious Crypto Shell Packages Target RubyGems
  writeupas classification.technologies2026-10-05
• HyBind: Structural Analysis of PQ/T Hybrid Cryptographic Usage
  paperas classification.technologies2026-10-05
• Today I learned: Python's .start Files as a Persistence Mechanism
  writeupas affected products2026-10-04

  Introduces .start files as a new interpreter-startup mechanism via PEP 829; deprecates executable 'import' lines in .pth files

• SequenceHash: multihashing for the rest of us
  writeupas classification.technologies2026-10-02
• https://github.com/praetorian-inc/gato
  toolas classification.technologies2026-10-02
• Python Hub (@PythonHub) on X
  toolas classification.technologies2026-10-02
• AuraForge: Scaling Security Supervision for Training Coding Agents
  paperas classification.technologies2026-10-01
• Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
  writeupas classification.technologies2026-09-29
• graygnatconsole/mcp-audit-tool
  repoas classification.technologies2026-09-26
• Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes
  writeupas classification.technologies2026-09-23
• nealbridges/VulnHunter
  repoas classification.technologies2026-09-22
• Grok 4.7 for Offensive Security: Orchestration Matters | XBOW
  articleas classification.technologies2026-09-21
• AI for Web3 Security: Zero to Hero
  courseas classification.technologies2026-09-21
• Socket: Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
  writeupas classification.technologies2026-09-20
• Outrider Recon
  repoas classification.technologies2026-09-19
• Zero-Trust Authorization and Discovery for Enterprise MCP
  paperas classification.technologies2026-09-18
• Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms
  writeupas classification.technologies2026-09-18
• crypt0p3g/adnullenum
  repoas classification.technologies2026-09-17
• Threat Actors Abuse IronPython to Deliver CastleLoader/CastleRAT
  writeupas classification.technologies2026-09-17
• HEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala Hack
  writeupas classification.technologies2026-09-17
• VIPER-MCP: Detecting Vulnerabilities in MCP Servers
  paperas classification.technologies2026-09-17
• MassPIIFinder v2
  repoas classification.technologies2026-09-15
• shinthink/blitzstrike
  repoas affected products2026-09-12

  language covered by Blitz Strike's source analysis and benchmark suite

• Malicious Code in Open Source: How to Detect It Before You Ship | Blog | Endor Labs
  articleas classification.technologies2026-09-11
• Machine speed, hold the AI: hand-rolled marimo CVE-2026-39987 exploit
  writeupas classification.technologies2026-09-11
• PlamenTSV/plamen
  repoas classification.technologies2026-09-07
• mukul975/cve-mcp-server
  repoas classification.technologies2026-09-07
• eldarshiraliyev/BugScanner
  repoas classification.technologies2026-09-05
• Malicious Model Detection with MLTracer Syscalls
  writeupas classification.technologies2026-09-01
• DataSentry
  repoas classification.technologies2026-08-27
• BountySkiller
  repoas classification.technologies2026-08-27
• subScraper
  repoas classification.technologies2026-08-27
• flawed
  repoas classification.technologies2026-08-23
• MinIO Security Lab
  repoas classification.technologies2026-08-21
• Teycir/BurpAPISecuritySuite
  repoas classification.technologies2026-08-21
• CarterPerez-dev/Cybersecurity-Projects
  repoas classification.technologies2026-08-21
• SKANF
  repoas classification.technologies2026-08-21
• Grok chat history leak: Cryptographic Context Injection
  writeupas classification.technologies2026-08-20
• Agno’s PythonTools Path Traversal: Arbitrary File Access & RCE
  advisoryas classification.technologies2026-08-20
• Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14%
  articleas classification.technologies2026-08-18
• opaxial/CVE-2026-9830
  repoas classification.technologies2026-08-15
• DocsGPT Security Hardening Playbook
  writeupas classification.technologies2026-08-15
• xiaoyeuzixi/revlab
  repoas classification.technologies2026-08-11
• PrimeIntellect-ai/prime-agent
  repoas classification.technologies2026-08-09
• Can AI Do Novel Security Research? Meet the HTTP Terminator
  writeupas classification.technologies2026-08-05
• autoguardrails
  repoas classification.technologies2026-08-05
• SecureAI-Scan
  repoas classification.technologies2026-08-05
• Beyond Prompt Injection: Persistent Memory Poisoning in AI Agents
  writeupas classification.technologies2026-08-04
• Anthropic Incident: An AI Agent Published a Malicious Package to PyPI and 15 Real Systems Ran It
  articleas classification.technologies2026-08-03
• Nomos
  repoas classification.technologies2026-08-02
• Codex Security CLI
  repoas affected products2026-08-01

  required runtime for Codex Security CLI

• Socket: Claude Breached 3 Companies and Uploaded Malware to PyPI During Anthropic's Security Tests
  articleas classification.technologies2026-08-01
• ChipWhisperer
  repoas classification.technologies2026-07-31
• Slither
  repoas classification.technologies2026-07-31
• Ghidra
  repoas classification.technologies2026-07-31
• Anthropic's Fever Dream: Claude's package that stole real keys
  writeupas classification.technologies2026-07-31
• thewhiteh4t/FinalRecon
  repoas classification.technologies2026-07-31
• Python OSINT Toolkit for Telegram
  articleas classification.technologies2026-07-31
• Clairvoyance
  repoas classification.technologies2026-07-31
• hackingtool
  repoas classification.technologies2026-07-31
• OSINT WhatsApp Intelligence
  articleas classification.technologies2026-07-31
• OSINT Wiretapper
  articleas classification.technologies2026-07-31
• Sherlock
  repoas classification.technologies2026-07-31
• OpenOSINT
  repoas classification.technologies2026-07-31
• Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
  writeupas classification.technologies2026-07-30
• Visa Vulnerability Agentic Harness (VVAH)
  repoas classification.technologies2026-07-29
• YuroGod/VMPStaticUnpacker
  repoas classification.technologies2026-07-29
• DevCop95/shodan_reconsx
  repoas classification.technologies2026-07-29
• The 2026-07-28 MCP Specification: Stateless Core, MRTR, Header-Based Routing
  articleas classification.technologies2026-07-28
• Compromised PyPI Package: mrmustard 0.7.4 Steals SSH, Cloud, and Kubernetes Credentials
  writeupas classification.technologies2026-07-25
• aniqfakhrul/CVE-2026-54121
  repoas classification.technologies2026-07-23
• ClawSecCheck
  repoas affected products2026-07-22
• Gabson0x/pentdem
  repoas classification.technologies2026-07-20
• AI Security Briefing
  articleas classification.technologies2026-07-18
• AI Security Briefing
  articleas classification.technologies2026-07-18
• FauxUV campaign (Xygeni)
  writeupas classification.technologies2026-07-18
• OpenNVR
  repoas classification.technologies2026-07-18
• VulnHunter (Capital One)
  repoas classification.technologies2026-07-18
• CyberSunil/LLMVault
  repoas classification.technologies2026-07-18
• Icex0/wp2shell-poc
  repoas classification.technologies2026-07-17
• AI-Powered Threat Modeling
  repoas classification.technologies2026-07-17
• CVE-2026-59950
  advisoryas classification.technologies2026-07-17
• AI Security Briefing
  advisoryas classification.technologies2026-07-17
• Socket: Coordinated npm/PyPI Campaign Typosquats Paysafe, Skrill, Neteller Payment SDKs
  writeupas classification.technologies2026-07-16
• Mantis
  repoas classification.technologies2026-07-15
• HOL Guard
  repoas affected products2026-07-15
• Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days Being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
  writeupas classification.technologies2026-07-15
• SreeragPramod/securepipe
  repoas affected products2026-07-15
• deep-scan
  repoas classification.technologies2026-07-14
• Protect AI llm-guard
  repoas classification.technologies2026-07-14
• deep scan tuto
  writeupas classification.technologies2026-07-14
• Azure/PyRIT
  repoas classification.technologies2026-07-14
• Giskard-AI/giskard-oss
  repoas classification.technologies2026-07-14
• Trusted-AI/adversarial-robustness-toolbox
  repoas classification.technologies2026-07-14
• NVIDIA-NeMo/Guardrails
  repoas classification.technologies2026-07-14
• AI Security Briefing
  advisoryas classification.technologies2026-07-13
• CVE-2026-61447
  advisoryas classification.technologies2026-07-12
• apisec-inc/AI-Surface
  repoas classification.technologies2026-07-11
• AI Security Briefing
  repoas classification.technologies2026-07-10
• Predicting MongoDB ObjectId continuously in Rocket.Chat
  writeupas classification.technologies2026-07-06
• AI Security Briefing
  advisoryas classification.technologies2026-07-05
• api-relay-audit
  repoas classification.technologies2026-07-04
• microsoft/RAMPART
  repoas classification.technologies2026-07-04
• 0xSteph/pentest-ai
  repoas classification.technologies2026-07-04
• Orca Security: Langflow RCE (CVE-2026-33017) Actively Exploited
  advisoryas classification.technologies2026-07-02
• Shipping post-quantum cryptography to Python
  writeupas classification.technologies2026-06-30
• Introducing GuardDog 3.0: new YARA rules engine, risk scoring, and sandboxing
  articleas classification.technologies2026-06-26
• From Code to Coverage (Part 6): What netlogon.log Sees That Event 1644 Never Will
  writeupas classification.technologies2026-06-24
• macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox
  writeupas classification.technologies2026-06-23
• AutoJack: How a single page can RCE the host running your AI agent | Microsoft Security Blog
  writeupas classification.technologies2026-06-19
• Vulnerability-Lookup
  advisoryas classification.technologies2026-06-18
• CVE-2026-49257: CWE-306: Missing Authentication for Critical Function in startreedata mcp-pinot - Live Threat Intelligence - Threat Radar | OffSeq.com
  advisoryas classification.technologies2026-06-18
• SuperagenticAI/superclaw
  repoas classification.technologies2026-06-18
• Prevent npm and Python Supply Chain Attacks on Developer Machines with Package Configs
  articleas classification.technologies2026-06-18
• graphw00f
  repoas classification.technologies2026-06-14
• Orca: Splunk Enterprise Critical CVEs
  advisoryas classification.technologies2026-06-12
• Endor Labs: Claude Fable 5
  writeupas classification.technologies2026-06-11
• Miasma & Hades Worms
  writeupas classification.technologies2026-06-10
• Microsoft's durabletask PyPI Package Compromised in Supply Chain Attack
  writeupas classification.technologies2026-06-09
• Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
  writeupas classification.technologies2026-06-09
• ShulkwiSEC/bb-huge
  repoas classification.technologies2026-06-05
• Type Level Security: The future of secure AI code generation?
  articleas tools2026-06-04

  Language used to demonstrate type-hint based mitigation of IDOR vulnerabilities

• Threat Actor Targets Crypto Organizations | Wiz Blog
  writeupas classification.technologies2026-05-27
• offensive-claude
  repoas classification.technologies2026-05-22
• Orca Security: Critical Pre-Auth RCE in ChromaDB Threatens AI Infrastructure
  advisoryas classification.technologies2026-05-22
• Panic at the Distro
  writeupas tools2026-05-14

  Native tooling (standard library only) usable by attackers to trivially exploit these vulnerabilities

• i8void/cybersleuth
  repoas classification.technologies2026-05-14
• knostic/OpenAnt
  repoas affected products2026-05-12

  supported language for scanning

• One year of Opengrep: What we built and what’s next
  articleas classification.technologies2026-05-12
• Alice and Bob Learn Secure Coding: Chapter 2
  videoas technologies2026-05-11
• claude-code-security-review
  repoas classification.technologies2026-05-10
• Pantheon-Security/medusa
  repoas classification.technologies2026-05-10
• Mirage
  repoas classification.technologies2026-05-08
• DefenseClaw
  repoas classification.technologies2026-05-07
• When Prompts Become Shells: RCE Vulnerabilities in AI Agent Frameworks (Semantic Kernel)
  writeupas classification.technologies2026-05-07
• DeepTeam
  repoas classification.technologies2026-05-07
• 0xhackerfren/ProcMon-MCP
  repoas classification.technologies2026-05-07
• ZXCurban/NetOrbit
  repoas affected products2026-05-07
• CRA Compliance Lab
  repoas classification.technologies2026-05-06
• CRA SBOM CLI
  repoas classification.technologies2026-05-06
• Butler
  repoas classification.technologies2026-05-06
• PyPI Access Control Vulns Patched
  articleas classification.technologies2026-05-06
• Clauditor
  repoas classification.technologies2026-05-06
• Presidio (Microsoft)
  repoas classification.technologies2026-05-06
• h1-brain
  repoas classification.technologies2026-05-06
• mcpwn
  repoas classification.technologies2026-05-06
• Microsoft Agent Governance Toolkit
  repoas classification.technologies2026-05-06
• PatrikFehrenbach/h1-brain
  repoas classification.technologies2026-05-05
• ClickFix Removes Your Background but Leaves the Malware
  writeupas affected products2026-04-30It is written here as Python (python.org embeddable distribution).

  Legitimate Python Software Foundation embeddable package downloaded by curl.exe, saved with a .pdf extension, used as the interpreter that hosts the shellcode loader

• Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE via AF_ALG/splice()
  writeupas classification.technologies2026-04-29
• SecTor 2025 | Ghost SIM Attack: Hacking Mobile Network Authentication Policies
  videoas technologies2026-04-25
• Marimo OSS Python Notebook RCE: From Disclosure to Exploitation in Under 10 Hours | Sysdig
  writeupas classification.technologies2026-04-09
• Extending Conquest using Python Modules
  writeupas classification.technologies2026-03-13
• Dissecting CrashFix: KongTuke's New Toy
  writeupas classification.technologies2026-01-16
• The Thinking Game | Full documentary
  videoas technologies2025-11-25
• Linux Capabilities Revisited
  writeupas affected products2025-05-16

  Backdoored via cap_setuid capability to allow privilege escalation to root without SUID bit

• Device Code Phishing: OAuth 2.0 Attacks in Google & Azure
  writeupas tools2025-02-06

  Used to script the device code request and polling process against Google's OAuth token endpoint

• Analysis of Python's .pth files as a persistence mechanism
  writeupas affected products2025-01-14

  Lines in .pth files beginning with 'import' followed by a space or tab are executed since Python 3.5, enabling code execution during module import.

• Today I Learned - Instrument ClamAV to extract AutoIT scripts
  writeupas classification.technologies2024-06-09
• OSINT from images' metadata hosted on websites
  articleas classification.technologies2023-04-13
• HackTheBox | xorxorxor
  writeupas classification.technologies2021-07-17
• VulnCheck - Outpace Adversaries
  toolas classification.technologies
• alirezarezvani/claude-skills
  repoas classification.technologies
• ToFu: Exploiting and Fuzzing the LLM–Orchestrator–Tool Trust Boundary
  paperas classification.technologies
• santosomar/AI-agents-for-cybersecurity
  repoas classification.technologies
• AI Agents for Cybersecurity: A Guided Tour of a Repository with Tons of Resources and Examples
  articleas classification.technologies
• AI Agents for Cybersecurity: A Guided Tour of a Repository with Tons of Resources and Examples
  articleas classification.technologies
• CISA AA26-281A: Chinese Government-linked Actors Combine Automated and Hands-on Hacking Tools to Steal Data
  advisoryas classification.technologies
• https://media.licdn.com/dms/document/media/v2/D4D1FAQGtvK5tUnN0EQ/feedshare-document-url-metadata-scrapper-pdf/B4DaEgDW2kKUA4-/0/1791539116721?e=1792170000&v=beta&t=6lNyWkJparrDrHu4bE6lW0AGmrORP_M9VmFbuMKjk98
  courseas classification.technologies
• target/strelka
  repoas classification.technologies
• DeepZero
  repoas classification.technologies
• PyRIT v1.1.0
  repoas classification.technologies
• CAIRN — Cisco Talos AI-Malware-Hunting Toolkit
  repoas classification.technologies
• garak v0.17.0 — LLM vulnerability scanner release
  repoas affected products

  dropped support for Python 3.10, added support for Python 3.13

• SpecterOps/Blacklight — local AI agent attack surface mapping toolkit
  repoas classification.technologies
• MCP Python SDK v2.2.0
  otheras classification.technologies
• FirmAgent: Fuzzing + LLM Agents for IoT Firmware Vulnerability Discovery (NDSS 2026)
  repoas classification.technologies
• SAPMAP — SAP Landscape Attack Path Mapper
  repoas classification.technologies
• garak v0.17.0 — adds EU AI Act risk-category mapping
  repoas affected products

  support dropped in garak v0.17.0

• Agent Threat Rules (ATR) — Sigma/YARA-style open detection format for AI agent threats
  otheras classification.technologies
• Sandyaa — open-source autonomous code auditor that proves bugs with working exploit PoCs
  repoas classification.technologies
• Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
  articleas classification.technologies
• LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE
  articleas classification.technologies
• CVE-2026-52869: The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP)
  advisoryas classification.technologies
• CVE-2026-19984: A flaw has been found in jkawamoto mcp-florence2 up to 0
  advisoryas classification.technologies
• CVE-2026-14748: A flaw has been found in AIAnytime Awesome-MCP-Server up to a884bb51bcd99e08e14fd712c749d55d9d9a13ab
  advisoryas classification.technologies
• rewanthtammana/Who-Let-The-Agents-Act
  repoas classification.technologies
• DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
  advisoryas classification.technologies
• Chocapikk/CVE-2026-21858
  repoas classification.technologies
• Warning: Vulnerability in Starlette framework and related frameworks like FastAPI exposes millions of servers to authentication bypass, Patch Immediately! | CCB Belgium
  advisoryas classification.technologies
• CVE-2026-87911 - Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
  advisoryas classification.technologies
• PYPILINE: Malicious PyPI Package Detection via Suspicious API Knowledge and Agent Workflow
  paperas classification.technologies
• Supply Chain Firewall (Datadog)
  repoas classification.technologies
• CVE-2026-26980 — Ghost CMS Content API unauthenticated blind SQLi lab
  repoas classification.technologies
• watchTowr detection artifact generator for Splunk CVE-2026-20253
  repoas classification.technologies
• awarexone/Agentic-Bug-Hunter
  repoas classification.technologies
• Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by AI-assisted fuzzing
  advisoryas classification.technologies
• capitalone/VulnHunter
  repoas classification.technologies
• Deadbugz: Currently Active MCP Supply-Chain Campaign
  writeupas classification.technologies
• knowledgator/opir-multitask-large-v1.0 · Hugging Face
  toolas classification.technologies
• CVE-2026-12773
  advisoryas classification.technologies
• CVE-2026-49291 | THREATINT
  advisoryas classification.technologies
• Breaking Claude Code Opus 5 Auto Mode · Embrace The Red
  writeupas affected productsIt is written here as Python (base64/struct standard library modules).

  Vulnerable to module shadowing when a malicious struct.py is placed on the module search path of an extracted archive directory

• Tencent/AI-Infra-Guard
  repoas classification.technologies
• CVE-2026-42533 nginx heap buffer overflow PoC (pre-auth RCE via two-pass capture clobbering)
  repoas classification.technologies