CVE-2026-47851

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47852

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

PT-2026-82783

The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...

CVE-2026-75337

The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...

PT-2026-82730

Name of the Vulnerable Software and Affected Versions ServiceNow AI platform affected versions not specified Description An unauthenticated user can execute arbitrary SQL statements against the underlying database of the ServiceNow AI platform. This occurs via a SQL injection in the dynamic schem...

PT-2026-82805

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save pipeline/load pipeline of the file pipeline tools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and...

PT-2026-82653

ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...

CVE-2026-75337

Yu AI Code Mother v4.3 is vulnerable to path traversal in its static resource interface /api/static/{deployKey}/. The user-controlled path is concatenated to the preview root directory without normalization , allowing anonymous attackers to read files outside the intended directory. The vulnerabi...

PT-2026-82652

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...

Sentinel-GPT

Sentinel-GPT: Agentische KI für die Bedrohungssuche 🛡️ Eine automatisierte Cybersicherheits-Pipeline, die rohe Azure-Protokolle mithilfe von LLM-basiertem Denken in umsetzbare Erkenntnisse umwandelt. 📖 Übersicht Sentinel-GPT ist ein KI-Agent, der auf die Bedrohungssuche in der Cybersicherheit...

CVE-2026-47852

CVE-2026-47852 affects Spring AI (versions 1.0.0–1.0.9 , 1.1.0–1.1.8 , and 2.0.0 ). A local attacker on a multi-user host can exploit a predictable (deterministic) cache directory path by pre-creating it and planting a malicious ONNX model file , leading to integrity impact as rated by the vendor...

CVE-2026-47852 Predictable cache directory location allows local ONNX model substitution in Spring AI

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47851

CVE-2026-47851 is a denial-of-service vulnerability in the Spring AI PDF Document Reader . When analyzing a PDF whose table of contents (outline tree) is deeply nested or cyclic, unbounded recursion triggers a StackOverflowError in the ingestion thread. The attack requires no privileges or user i...

CVE-2026-47851 Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

ai-ide-config-guard

valtik-ai-ide-config-guard Analizza un repository alla ricerca di file di configurazione AI-IDE che possono innescare RCE, furto di credenziali o compromissione persistente delle macchine degli sviluppatori quando il repository viene aperto in Claude Code, Cursor, Windsurf, Continue o qualsiasi...

ADBloodHound-AI

ADBloodHound-AI KI-gestützte Active-Directory-Angriffspfadanalyse Analyse de chemins d'attaque Active Directory avec Intelligence Artificielle Englisch | Francais Architecture root@kitploit: +---------------------------+ | BloodHound JSON Export | | users, groups, ACLs |...

LDAPRecon-AI

LDAPRecon-AI Auditor di sicurezza LDAP per Active Directory con analisi basata su IA Enumera, valuta e assegna un punteggio alla postura di sicurezza del tuo ambiente AD English | Francais root@kitploit: | | | \ / \ | | \ / \ | | | | | | | |/ \ | | | | / / / | ' \ / \ | | | || || / | /| / | | |...

aigate

aigate Higiene de segredos para código gerado por IA. Detecta credenciais fixadas em prompts, entradas de ferramentas, código gerado e arquivos existentes. Início rápido root@kitploit: pip install aigate && aigate setup-all É isso. Instala um proxy em segundo plano modo redact, um hook PostToolUs...

AI-PASSWORD-TESTING-AGENT

KI-gestützter Passwortangriffs-Orchestrator – Abwehr-Forschungs-Repository ⚠️ RECHTLICHER HAFTUNGSAUSSCHLUSS & FORSCHUNGSZWECK DIESES REPOSITORY DIENT AUSSCHLIESSLICH DER DEFENSIVEN CYBERSICHERHEITSFORSCHUNG UND BILDUNGSZWECKEN KEIN AUSFÜHRBARER CODE – Dieses Repository enthält ausschließlich...

gr-qradiolink

gr-qradiolink AVVISO IMPORTANTE : Questo è codice generato da intelligenza artificiale. Questo codice non è stato revisionato da programmatori professionisti; si tratta di un compito complesso. Nel codice sono disponibili dei test; si prega di esaminarli insieme al loro codice. Modulo GNU Radio...