A little signal. Less noise.

DISCOVER

More possibility. Less searching.

A considered collection of AI tools, trials, and opportunities.

RADAR / PostgreSQLConnection pending

ExploreCatalog

A little signal. Less noise.

EN RU

Loading the catalog…

RADARGood tools open new possibilities.Explore thoughtfully. Create freely.

RADAR.

A little signal. Less noise.

DISCOVER

Catalog Categories

More possibility. Less searching.

A considered collection of AI tools, trials, and opportunities.

RADAR / PostgreSQLStorage available

ExploreCatalog

A little signal. Less noise.

EN RU

THE AI OPPORTUNITY INDEX

Discover more.
Spend less.

Find your next AI tool. Explore free access, trials, and credits — all in one place.

Less searching. More creating.

All offers Actionable Categories

Sort by

12 per page

Explore the catalog

9 on this page

CSecurity advisory

CVE-2026-85734: lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

lightrag-hku

critical severity · CVSS 9.1 · CWE-307 · pip lightrag-hku · affected < 1.5.5 · fixed in 1.5.5

Score: 69.72Confidence: 67%

View offer

CSecurity advisory

CVE-2026-94462: Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR)

spree_api

high severity · CVSS 7.1 · CWE-639 · rubygems spree_api · affected >= 5.4.0, < 5.4.4 · fixed in 5.4.4

Score: 69.72Confidence: 67%

View offer

CSecurity advisory

CVE-2026-91130: Home Assistant: XSS in Statistics Graph Card

homeassistant

critical severity · CWE-80 · pip homeassistant · affected < 2026.7.0 · fixed in 2026.7.0

Score: 69.72Confidence: 67%

View offer

CSecurity advisory

CVE-2026-62371: KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API

github.com/kubeedge/kubeedge

high severity · CVSS 8.8 · CWE-78 · go github.com/kubeedge/kubeedge · affected >= 1.12.0, < 1.21.2 · fixed in 1.21.2

Score: 69.72Confidence: 67%

View offer

CSecurity advisory

CVE-2026-62369: KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join

github.com/kubeedge/kubeedge

high severity · CVSS 8.1 · CWE-22 · go github.com/kubeedge/kubeedge · affected >= 1.16.0, < 1.21.2 · fixed in 1.21.2

Score: 69.72Confidence: 67%

View offer

CSecurity advisory

CVE-2026-77633: Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

github.com/cloudreve/Cloudreve/v4

high severity · CVSS 7.1 · CWE-362 · go github.com/cloudreve/Cloudreve/v4 · affected < 4.0.0-20260715025621-7329602751c0 · fixed in 4.0.0-20260715025621-7329602751c0

Score: 69.72Confidence: 67%

View offer

CSecurity advisory

CVE-2026-77560: Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for

github.com/tinyauthapp/tinyauth

high severity · CVSS 8.1 · CWE-178 · go github.com/tinyauthapp/tinyauth · affected < 1.0.1-0.20260720133915-80bc87188ec3 · fixed in 1.0.1-0.20260720133915-80bc87188ec3

Score: 69.72Confidence: 67%

View offer

CSecurity advisory

CVE-2026-76819: Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

github.com/projectdiscovery/nuclei/v3

high severity · CVSS 8.6 · CWE-94 · go github.com/projectdiscovery/nuclei/v3 · affected >= 3.0.0, < 3.10.0 · fixed in 3.10.0

Score: 69.72Confidence: 67%

View offer

CSecurity advisory

CVE-2026-85740: lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

lightrag-hku

high severity · CVSS 7.1 · CWE-918 · pip lightrag-hku · affected < 1.5.5 · fixed in 1.5.5

Score: 69.72Confidence: 67%

View offer

Page 1 · 9 offers total

Real offers. Useful details.

The catalog shows persisted RADAR opportunities. Storage availability does not mean sources are verified or offers are active.

RADARGood tools open new possibilities.Explore thoughtfully. Create freely.

Discover more.Spend less.

Explore the catalog

Discover more.
Spend less.