Issues · 0x4m4/hexstrike-ai

Public

#297

4d ago

#296

Security: unauthenticated /api/command + /api/python/execute with 0.0.0.0 bind — network-exposed RCE (API_HOST env ignored)

7d ago

#285

ARM64 command API and health regression verification

20d ago

#284

Authenticated legacy command execution

20d ago

#283

Canonical health catalogue

20d ago

#282

Command API configuration guard

20d ago

#281

Secure legacy command API and centralize health catalogue

20d ago

#279

Added 1-click config generator and setup guide for hexstrike-ai on MCP ServerList

20d ago

#272

post evaluation for a project

1mo ago

#268

Feature Suggestion: Optional token metering & paid API key support via `neuforge-pay`

1mo ago

#265

Command injection via additional_args across all /api/tools/* endpoints (follow-up to #263)

2mo ago

#263

Unauthenticated OS command injection via nmap/gobuster target parameters

2mo ago

#262

[First-time contributor] Looking for beginner-friendly issues to contribute

2mo ago

#261

Threat-intelligence correlation endpoint has dead exploit-scoring logic and returns fabricated IP/hash results with no indication they're simulated

2mo ago

#229

Feature Suggestion: Optional token metering & paid API key support via `neuforge-pay`

2mo ago

#227

Windows/non-Linux portability bug: hardcoded /tmp paths crash the server at import

3mo ago

#220

mcp connect failed

3mo ago

#211

Installing tools on a sandboxed envrionment should be an option

4mo ago

#204

Security: Critical RCE via unsafe deserialization and command execution

4mo ago

#203

Preventing unauthorized users from running pentest tools via your MCP server

5mo ago

#199

Proposal: Officially migrate build system to Astral UV for reproducible installs

5mo ago

#190

Tik tok

5mo ago

#183

security

6mo ago

#180

Issue with 5ire

6mo ago

#172

OpenClaw integration - autonomous bug bounty agents

6mo ago