CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – AI content writing assistant = 1.0.18 - Mancanza di autorizzazione per l'installazione/attivazione arbitraria di plugin per utenti autenticati Subscriber+ Descrizione Il plugin 10Web AI Assistant – AI content writing assistant per WordPress è vulnerabile alla...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Deaktivierte TLS-Zertifikatsprüfung im KI-Assistenten Netzwerknaher MITM → Diebstahl des LLM-Anbieter-API-Schlüssels & Injektion von KI-Antworten...

stavrobot

Stavrobot Stavrobot ist ein persönlicher KI-Assistent, der nach dem Prinzip „so viel Zugriff, wie ein KI-Assistent benötigt, und nicht mehr“ aufgebaut ist. Er bietet alle nützlichen Funktionen eines KI-Assistenten, konzentriert sich jedoch auf Sandboxing, Isolierung und minimale Berechtigungen. E...

GeoSentinel

🌍 GeoSentinel GeoSentinel è una piattaforma di monitoraggio geospaziale che traccia i movimenti globali in tempo reale. Aggrega rotte di navi e aerei, coordinate in tempo reale e geodati in un sistema unificato, fornendo una chiara consapevolezza geografica e geopolitica per analisi,...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Generatore di Contenuti e Immagini = 1.7.7 - Autenticato Editor+ Caricamento Arbitrario di File Il plugin WordPress S2B AI Assistant versioni 2.47 e precedenti contiene una vulnerabilità di caricamento arbitrario di file che consente agli utenti...

pentest-muse-cli

Pentest Muse Pentest Muse ist ein KI-Assistent, der speziell für Cybersicherheitsexperten entwickelt wurde. Er kann Penetrationstestern helfen, Ideen zu entwickeln, Payloads zu schreiben, Code zu analysieren und Aufklärungsarbeit zu leisten. Er kann auch Aktionen ausführen, Befehlszeilencodes...

ironclaw

IronClaw Il tuo assistente AI personale sicuro, sempre al tuo fianco English | 简体中文 | Русский | 日本語 | 한국어 Reborn Quick Start • Philosophy • Features • Installation • Configuration • Security • Architecture IronClaw Reborn Quick Start IronClaw Reborn è il runtime standalone presente nel branch...

CVE-2026-78581

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

EUVD-2026-65489

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

CVE-2026-78581

CVE-2026-78581 is an authorization bypass (CWE-639) in Kibana affecting the AI Assistant feature. An authenticated user could reference another user's AI Assistant conversation identifier to access or modify a conversation they do not own. Successful exploitation requires knowledge of a hard-to-g...

CVE-2026-78581 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

jebmcp

Un server e plugin MCP rapido e sporco per JEB Pro. Testato su Cline, Cursor e RooCode. Riferimento: https://github.com/mrexodia/ida-pro-mcp Installazione Requisiti root@kitploit: Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Utilizzo COPIA il file src/jebmcp/MCP.py in...

pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351 — pgAdmin 4 KI-Assistent Read-Only-Bypass durch Lexer-Differenz PoC für CVE-2026-17351, einen kritischen CVSS 9.0 SQL-Injection-Bypass im KI-Assistenten von pgAdmin 4. Zusammenfassung der Schwachstelle pgAdmin 4 Versionen 9.13 bis 9.16 verwenden die Python-Bibliothek sqlparse, um z...

CVE-2026-73847-emlog-PoC

CVE-2026-73847 — Assistente de IA do emlog: CSRF → Execução de SQL → Assunção total da conta de administrador PoC para a falta de proteção contra CSRF no endpoint executetool do Assistente de IA do emlog pro, que permite a um atacante aproveitar a sessão autenticada de um administrador para...

CVE-2026-73847

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant executetool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page to a recently logged-in administrator...

CVE-2026-12976

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

CVE-2026-12976

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

CVE-2026-12976 LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

CVE-2026-12976

The CVE identifies a vulnerability in the LearnPress WordPress plugin prior to version 4.4.4 where enrollment checks are not performed for AI‑assistant requests against a course’s lesson content. This allows any authenticated user (e.g., a subscriber) to access material from paid courses they hav...

CVE-2026-17351

A flaw was found in pgAdmin 4. The AI Assistant's SQL query tool, designed for read-only operations, contains a vulnerability where a disagreement between its SQL validator and the PostgreSQL database parser allows for a transaction bypass. A remote attacker with low-privilege database write acce...