CVE-2026-67598

CVE-2026-67598 Emlog Pro — Validação de Certificado TLS Desativada no Assistente de IA MITM adjacente à rede → roubo de chave de API do provedor de LLM e injeção de resposta de IA...

stavrobot

Stavrobot Stavrobot é um assistente pessoal de IA construído com o princípio de "todo o acesso que um assistente de IA precisa, e nada mais". Ele tem todos os recursos interessantes de um assistente de IA, mas foca em sandboxing, isolamento e permissões mínimas. É leve e é implantado com apenas u...

GeoSentinel

🌍 جيوسنتينل GeoSentinel هي منصة مراقبة جغرافية مكانية تتبع الحركة العالمية في الوقت الفعلي. تقوم بتجميع مسارات الطيران والسفن والإحداثيات الحية والبيانات الجغرافية في نظام موحد، مما يوفر وعيًا جغرافيًا وجيوسياسيًا واضحًا للتحليل والتصور واتخاذ القرار. 🚀 !TIP 🚀 قم بزيارة المدونة تحديثات ورؤى Geo...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator putcontents$outfile, $filecontent, FSCHMODFILE 344행 취약점은 다음과 같은 이유로 발생합니다: 1. 경로 등록 : 업로드 엔드포인트는 AdminChatBotController.php에 등록됩니다. 2. 컨트롤러 접근 : processAssistantUpload 메서드가 업로드 요청을 처리합니다 1103행. 3. 입력 처리 :...

pentest-muse-cli

Pentest Muse Pentest Muse é um assistente de IA projetado para profissionais de cibersegurança. Ele pode ajudar testadores de penetração a gerar ideias, escrever payloads, analisar código e realizar reconhecimento. Também pode executar ações, executar códigos de linha de comando e resolver tarefa...

ironclaw

IronClaw आपका सुरक्षित व्यक्तिगत AI सहायक, हमेशा आपके साथ English | 简体中文 | Русский | 日本語 | 한국어 रिबॉर्न त्वरित प्रारंभ • दर्शन • विशेषताएँ • स्थापना • कॉन्फ़िगरेशन • सुरक्षा • आर्किटेक्चर IronClaw Reborn त्वरित प्रारंभ IronClaw Reborn, reborn-integration शाखा पर एक स्टैंडअलोन रनटाइम है। यह...

CVE-2026-78581

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

EUVD-2026-65489

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

CVE-2026-78581 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

CVE-2026-78581

CVE-2026-78581 is an authorization bypass (CWE-639) in Kibana affecting the AI Assistant feature. An authenticated user could reference another user's AI Assistant conversation identifier to access or modify a conversation they do not own. Successful exploitation requires knowledge of a hard-to-g...

jebmcp

Um servidor e plugin MCP rápido e improvisado para JEB Pro. Testado no Cline, Cursor e RooCode. Referência: https://github.com/mrexodia/ida-pro-mcp Instalação Requisitos root@kitploit: Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Uso COPIE o arquivo src/jebmcp/MCP.py...

pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351 — Bypass de Somente Leitura do Assistente de IA do pgAdmin 4 via Diferencial de Lexer PoC para CVE-2026-17351, um bypass crítico CVSS 9.0 de injeção de SQL no Assistente de IA do pgAdmin 4. Resumo da Vulnerabilidade As versões 9.13 a 9.16 do pgAdmin 4 usam a biblioteca sqlparse do...

CVE-2026-73847-emlog-PoC

CVE-2026-73847 — Assistant IA d'emlog CSRF → Exécution SQL → Prise de contrôle admin PoC pour l'absence de protection CSRF sur le point de terminaison executetool de l'Assistant IA d'emlog pro, qui permet à un attaquant d'utiliser la session authentifiée d'un administrateur pour exécuter du SQL...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – Assistente de escrita de conteúdo com IA = 1.0.18 – Autorização ausente para instalação/ativação arbitrária de plugins por usuários autenticados Assinante+ Descrição Descrição O plugin 10Web AI Assistant – Assistente de escrita de conteúdo com IA para WordPress ...

CVE-2026-73847

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant executetool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page to a recently logged-in administrator...

CVE-2026-12976

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

CVE-2026-12976

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

CVE-2026-12976 LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

CVE-2026-12976

The CVE identifies a vulnerability in the LearnPress WordPress plugin prior to version 4.4.4 where enrollment checks are not performed for AI‑assistant requests against a course’s lesson content. This allows any authenticated user (e.g., a subscriber) to access material from paid courses they hav...

CVE-2026-17351

A flaw was found in pgAdmin 4. The AI Assistant's SQL query tool, designed for read-only operations, contains a vulnerability where a disagreement between its SQL validator and the PostgreSQL database parser allows for a transaction bypass. A remote attacker with low-privilege database write acce...