skill-safety-bench

SkillSafetyBench SkillSafetyBench 是一个已经物化好的 benchmark，用来评估针对 skill-facing context 的攻击导致的 agent 安全失败。每个 case 都保持用户表层任务是普通任务，同时把攻击放在本地 skills、helper scripts、sidecar files、corpora、templates 或其他 agent 执行时可能读取的 workspace artifacts 中。 欢迎访问 SkillSafetyBench website 查看 benchmark 设计、case...

DEBIAN-CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

ROPE

ROPE: Aplicación de Política de Origen Enrutado Código fuente de nuestro artículo: ROPE: Aplicación de Política de Origen Enrutado contra la Inyección Indirecta de Prompts por Xinhang Ma, Chaowei Xiao, William Yeoh, Ning Zhang, Yevgeniy Vorobeychik Resumen La inyección indirecta de prompts IPI...

CVE-2021-27876

CVE-2021-27876 针对 Veritas Backup Exec Agent 的未认证远程代码执行利用（CVE-2021-27876/77/78）—— 通过 NDMP 绕过 SHA 认证获取 SYSTEM 权限 CVEs CVE| 描述| CVSS 3.1 ---|---|--- CVE-2021-27876| 通过 NDMP 协议中的 SHA 哈希操纵绕过认证| 9.8 严重 CVE-2021-27877| 未认证任意文件读取（通过 NDMP）| 9.8 严重 CVE-2021-27878| 通过 NDMPEXECUTECOMMAND 执行任意 OS 命令| 9.8 严重 公...

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access FDA due to security risks posed by artificial intelligence AI agents. "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their...

EUVD-2026-92398

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786 Active agent heartbeat missing TLS check

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786 Active agent heartbeat missing TLS check

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-59786

Zabbix Server and Proxy are vulnerable to a flaw where they accept active agent heartbeat messages without performing the required TLS check for configured PSK or certificate authentication. An attacker with access to the Zabbix trapper port can exploit this to report an arbitrary host as availab...

EvilAhenk

CVE-2026-6508 EvilAhenk 是 LiderAhenk 中央管理系统架构中的一个关键安全漏洞，允许所有客户端在彼此之间以 'root' 权限执行代码（未授权 RCE 与横向移动）。 系统如何工作 在 LiderAhenk 中，管理面板/中央服务器通过 XMPP 向客户端发送任务和策略消息。 中央管理面板通过授权用户连接到 XMPP 服务器， 客户端上的 ahenk agent 也连接到同一个 XMPP 基础设施， 中央向目标客户端发送诸如 EXECUTEPOLICY、EXECUTETASK 或 EXECUTESCRIPT 等消息， 客户端 agent 接收并执行这些消息...

CVE-2026-100102

Perforce P4 Search container images prior to version 2026.4.2 are vulnerable to remote code execution due to an unauthenticated Java debug interface (JDWP) being enabled. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, which may lead ...

CVE-2026-100102 RCE via exposed JDWP debug agent in P4Search

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.326 Vulnerability Details CVEID:CVE-2026-63383 DESCRIPTION: Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a...

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection...

Modified-CVE-2020-10915-MsfModule

Modified-CVE-2020-10915-MsfModule これはオリジナルのエクスプロイトではありません。これはTHMボックス用に監査されたバージョンです。 以下は、オリジナル、tryhackmeボックス、およびそのボックスの私のwriteupへのリンクです： https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/veeamoneagentdeserialization.rb https://tryhackme.com/room/set...

Malicious code in monitoring-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703c1e796904571c9f0d08a4769a5f7e25a646483b4a66815a6ddc420ae0ecee The package exports an Express middleware monitor advertised as a monitoring tool. On every response finish, the middleware POSTs the inbound HTTP...

mythic_ornn

Mythic Ornn 基于LLM的Mythic Agent、Payload-Type和C2 Profile生成器。 手工编写Mythic agent非常繁琐：每个agent都需要重新实现相同的线缆协议、payload-type脚手架和C2管道。Mythic Ornn通过将官方Mythic开发者文档转化为生成管道的检索层，跳过了这些样板代码。LLM查阅本地精简版的文档副本，并生成与文档化消息格式开箱即用的agent。 该管道以两种模式运行，共享相同的文档和规则： 提示模式 — template/AGENT.md...

Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service

CVE-2021-44228 Spring Boot 测试服务 这是一个临时拼凑的 Spring Boot Hello World 项目，用于在攻击生产环境目标之前，先在本地测试你的工具/载荷/检测能力。 配置的 Log4j 版本为 2.13.0 构建 Docker 镜像 bash build.sh 运行 Docker 镜像 docker run -p 8080:8080 dwdi/log4shell 测试 / 触发 CVE-2021-44228 如果你没有在车库中运行 burp collaborator，可以访问此站点获得类似体验：https://interactsh.com curl...