Redis: In-Memory Data Store Provider
Redis is an open-source, in-memory data structure store used as a database, cache, and message broker. It shipped seven security releases on…
Tag: Open Source
Kimi K3 AI Agents Discover Multiple Redis Zero-Days and Build RCE Exploit Chains
On July 23, 2026, Redis shipped seven security releases after researchers published authenticated remote code execution (RCE) proof-of-concept (PoC) exploits for stock…
NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
Eight security flaws in NodeBB were disclosed on July 24, 2026, along with exploit code. Discovered by Aikido Security's AI pentest agents…
NodeBB: Open Source Forum Software
NodeBB is an open-source forum software that powers community discussions. It recently patched eight high-severity vulnerabilities discovered by AI pentest agents, affecting…
Windmill: Open-Source Developer Platform
Windmill is an open-source developer platform affected by CVE-2026-29059, a path traversal vulnerability allowing unauthenticated file read and potential RCE.
Open-AutoGLM: Open-Source Android AI Agent Framework
An open-source Android AI agent framework with over 25,000 GitHub stars. Vulnerable to multiple attacks including broadcast interception and command injection.
MobA: Open-Source Android AI Agent Framework
An open-source Android AI agent framework that streams screenshots over exec-out, avoiding file race conditions, but still vulnerable to other attack vectors.
Open-Source Android AI Agents Vulnerable to Invisible Screen Text Attacks Leading to Host Code Execution
Researchers have demonstrated that open-source Android AI agent frameworks are vulnerable to a novel attack chain where invisible screen text can lead…
AppAgent: Open-Source Android AI Agent Framework
An open-source framework for AI agents on Android. Vulnerable to command injection and screenshot tampering attacks as demonstrated in recent research.
AppAgentX: Open-Source Android AI Agent Framework
An open-source Android AI agent framework found vulnerable to multiple attack vectors including invisible text injection and host command execution.