skill-safety-bench

SkillSafetyBench SkillSafetyBench 是一个已经物化好的 benchmark，用来评估针对 skill-facing context 的攻击导致的 agent 安全失败。每个 case 都保持用户表层任务是普通任务，同时把攻击放在本地 skills、helper scripts、sidecar files、corpora、templates 或其他 agent 执行时可能读取的 workspace artifacts 中。 欢迎访问 SkillSafetyBench website 查看 benchmark 设计、case...

DEBIAN-CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

ROPE

ROPE: Aplicación de Política de Origen Enrutado Código fuente de nuestro artículo: ROPE: Aplicación de Política de Origen Enrutado contra la Inyección Indirecta de Prompts por Xinhang Ma, Chaowei Xiao, William Yeoh, Ning Zhang, Yevgeniy Vorobeychik Resumen La inyección indirecta de prompts IPI...

CVE-2021-27876

CVE-2021-27876 针对 Veritas Backup Exec Agent 的未认证远程代码执行利用（CVE-2021-27876/77/78）—— 通过 NDMP 绕过 SHA 认证获取 SYSTEM 权限 CVEs CVE| 描述| CVSS 3.1 ---|---|--- CVE-2021-27876| 通过 NDMP 协议中的 SHA 哈希操纵绕过认证| 9.8 严重 CVE-2021-27877| 未认证任意文件读取（通过 NDMP）| 9.8 严重 CVE-2021-27878| 通过 NDMPEXECUTECOMMAND 执行任意 OS 命令| 9.8 严重 公...

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access FDA due to security risks posed by artificial intelligence AI agents. "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their...

EUVD-2026-92398

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786 Active agent heartbeat missing TLS check

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786 Active agent heartbeat missing TLS check

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786

Zabbix Server and Proxy are vulnerable to a flaw where they accept active agent heartbeat messages without performing the required TLS check for configured PSK or certificate authentication. An attacker with access to the Zabbix trapper port can exploit this to report an arbitrary host as availab...

EvilAhenk

CVE-2026-6508 EvilAhenkは、LiderAhenk統合管理システムアーキテクチャにおいて、エージェント間のすべてのクライアントが互いに'root'権限でコードを実行できるようにする（許可されていないRCEおよび横方向の移動）重大なセキュリティ脆弱性です。 システムの仕組み LiderAhenkでは、管理パネル/中央サーバーがXMPPを介してクライアントにタスクとポリシーメッセージを送信します。 中央管理パネルは、権限のあるユーザーでXMPPサーバーに接続します。 クライアント上のahenkエージェントも同じXMPP基盤に接続します。...

CVE-2026-100102

Perforce P4 Search container images prior to version 2026.4.2 are vulnerable to remote code execution due to an unauthenticated Java debug interface (JDWP) being enabled. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, which may lead ...

CVE-2026-100102 RCE via exposed JDWP debug agent in P4Search

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.326 Vulnerability Details CVEID:CVE-2026-63383 DESCRIPTION: Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a...

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection...

Modified-CVE-2020-10915-MsfModule

Modified-CVE-2020-10915-MsfModule これはオリジナルのエクスプロイトではありません。これはTHMボックス用に監査されたバージョンです。 以下は、オリジナル、tryhackmeボックス、およびそのボックスの私のwriteupへのリンクです： https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/veeamoneagentdeserialization.rb https://tryhackme.com/room/set...

Malicious code in monitoring-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703c1e796904571c9f0d08a4769a5f7e25a646483b4a66815a6ddc420ae0ecee The package exports an Express middleware monitor advertised as a monitoring tool. On every response finish, the middleware POSTs the inbound HTTP...

mythic_ornn

Mythic Ornn 基于LLM的Mythic Agent、Payload-Type和C2 Profile生成器。 手工编写Mythic agent非常繁琐：每个agent都需要重新实现相同的线缆协议、payload-type脚手架和C2管道。Mythic Ornn通过将官方Mythic开发者文档转化为生成管道的检索层，跳过了这些样板代码。LLM查阅本地精简版的文档副本，并生成与文档化消息格式开箱即用的agent。 该管道以两种模式运行，共享相同的文档和规则： 提示模式 — template/AGENT.md...

Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service

CVE-2021-44228 Spring Boot テストサービス これは、実際の本番環境にヒットする前に、ローカルでツールやペイロード、検出機能をテストするための、汚いハック的なSpring Boot Hello Worldプロジェクトです。 設定されているLog4jのバージョンは2.13.0です。 Dockerイメージのビルド bash build.sh Dockerイメージの実行 docker run -p 8080:8080 dwdi/log4shell CVE-2021-44228のテスト / トリガー ガレージでBurp...