9 matches found
ai-llm-red-team-handbook
AI / LLM レッドチームフィールドマニュアル＆コンサルタントハンドブック 大規模言語モデル（LLM）、AIエージェント、RAGパイプライン、AI対応アプリケーションに対するAI/LLMレッドチーム評価のための包括的な運用ツールキットです。このリポジトリは、戦術的な現場ガイダンスと戦略的なコンサルティングフレームワークの両方を提供します。 📖 GitBookナビゲーション: 完全な章構成はSUMMARY.mdを参照してください。 📚 概要 このリポジトリは、AI LLMレッドチームハンドブックのゴールドマスター...
EUVD-2026-56097
n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts...
CVE-2026-72771 n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes
n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts...
CVE-2026-72771
n8n (software) before version 2.32.1 has a credential restriction bypass vulnerability in AI/LLM nodes due to improper enforcement of the Allowed HTTP Request Domains allowlist. When users configure base or endpoint URLs, low-privilege workflow editors with access to shared credentials can redire...
CVE-2026-27740: Improper Neutralization of Input During Web Page Generation
Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a cross-site scripting vulnerability that arises because the system trusts the raw output from an AI Large Language Model LLM and renders it using htmlSafe in the Review Queue interfa...
BentoML Detected
This is an informational plugin to inform the user that the scanner has detected a publicly accessible BentoML instance on the target application. BentoML is an open-source inference platform. This detection is included in the AI and LLM category. No source data...
AI/LLM Bettybot Domain Detection
Binary data 701483.prm...