{"uuid": "f424d18c-6dbe-491b-bca4-5be1fb18de75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-H6C2-X2M2-MWHF", "type": "seen", "source": "https://t.me/NinjaSecurity/280", "content": "The FLARE team now freely distributes its quality reverse engineering and malware analysis educational content at https://github.com/mandiant/flare-learning-hub. Launched with:\n- Malware Analysis Crash Course\n- Go Reversing Reference\n- Intro to TTD\n\nThe complete Rust SDK for building coding agents.\n\nhttps://github.com/pacifio/cersei\n\nGoogle's TurboQuant in llama.cpp with Metal kernels for Apple Silicon.\n\n4.9\u00d7 KV cache compression.\nWorking end-to-end on M5 Max with Qwen 3.5 35B MoE and Qwopus v2 27B.\n- http://github.com/TheTom/turboquant_plus\n\nCodeSage_v1\nMulti-Agent \u667a\u80fd\u4ee3\u7801\u5ba1\u67e5\u5e73\u53f0\n\nhttps://github.com/Everchener/CodeSage_v1\n\nAI-assisted code security scanning for files, repositories, Git diffs, and coding agents.\nStart with deterministic rules, use LLM analysis to deepen context, and expose the scanner through MCP and a Codex skill.\n\nhttps://github.com/HeJiguang/codescan\n\nLiteWebScan v3.1\n\nhttps://github.com/Deng666-dev/LiteWebScan\n\nvphone-aio\n1 script run the vphone (iOS 26.1), already jailbroken with full bootstrap installed.\n\nhttps://github.com/34306/vphone-aio\n\nA high-performance application for analyzing drone flight logs (DJI and Litchi CSV formats). Available as a Tauri v2 desktop app or a Docker-deployable web app. Built with DuckDB and React.\n\nhttps://github.com/arpanghosh8453/open-dronelog\n\nEUOSINT is the open-source edition of our OSINT pipeline, used across multiple installations and packaged for local and server deployment.\n\nThis repository has been prepared for public use by removing non-public, internal, and protected source integrations while keeping the operational pipeline structure intact.\n\nhttps://github.com/scalytics/EUOSINT\n\nUnauthenticated MCP Endpoint Allows Remote Nginx Takeover\n\nhttps://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h6c2-x2m2-mwhf\n\nL0p4Map is a professional-grade network monitoring tool that combines the power of nmap with a clean, modern dark UI. Designed for security researchers and network administrators who need fast, detailed visibility into their infrastructure.\n\nhttps://github.com/HaxL0p4/L0p4Map\n\nThis repository is unofficial and is reconstructed from the public npm package and source map analysis, for research purposes only. It does not represent the original internal development repository structure.\n\nhttps://github.com/ChinaSiro/claude-code-sourcemap\n\nA tool for sharing internet access from a free network to a restricted network using Xray-core reverse proxy.\n\nhttps://github.com/net2share/nethopper\n\nOFFENSIVE SECURITY & REVERSE ENGINEERING (OSRE) Course\n\nhttps://github.com/ashemery/exploitation-course\n\n\"Bob the Smuggler\" is a tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).\n\nhttps://github.com/TheCyb3rAlpha/BobTheSmuggler\n\nOverview of the tool:\nPerforms OSINT on a domain / email / username / phone and find out information from different sources.\nCorrelate and collaborate the results, show them in a consolidated manner.\nTries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc. related to the target.\n\nhttps://github.com/DataSploit/datasploit\n\nAIRecon is an autonomous penetration testing agent that combines a self-hosted Ollama LLM with a Kali Linux Docker sandbox, native Caido proxy integration, a structured RECON \u2192 ANALYSIS \u2192 EXPLOIT \u2192 REPORT pipeline, and a real-time Textual TUI \u2014 completely offline, no API keys required.\n\nhttps://github.com/pikpikcu/airecon\n\nAutoresearch Discovers State-of-the-Art Adversarial Attack Algorithms for LLMs.\n\nhttps://github.com/romovpa/claudini\n\nFlexphish is a flexible and modular phishing framework designed for security professionals, red teams, and researchers to simulate real-world phishing campaigns in controlled environments.", "creation_timestamp": "2026-08-19T21:00:03.197048Z"}