CVE-2026-103762 SiYuan before v3.8.5 Missing Authorization in Save-Path Resolver Endpoints

SiYuan before v3.8.5 contains a missing authorization vulnerability in the getRefCreateSavePath, getShorthandSavePath, and getDocCreateSavePath endpoints that allows read-only publish visitors to learn unpublished notebook box IDs. Attackers with read-only or anonymous publish access can POST any...

EUVD-2026-91419

SiYuan before v3.8.5 contains a missing authorization vulnerability in the getRefCreateSavePath, getShorthandSavePath, and getDocCreateSavePath endpoints that allows read-only publish visitors to learn unpublished notebook box IDs. Attackers with read-only or anonymous publish access can POST any...

CVE-2026-103762

SiYuan versions prior to v3.8.5 are susceptible to a missing authorization vulnerability within the getRefCreateSavePath, getShorthandSavePath, and getDocCreateSavePath endpoints. Attackers with read-only or anonymous publish access can exploit this by performing a POST request with any open note...

Obfuscapk

!IMPORTANT 이 프로젝트는 보관되었으며 더 이상 유지 관리되지 않습니다. 가장 자주 묻는 질문 중 일부는 FAQ와 문제 해결에서 답변하고 있습니다. 안드로이드 앱을 위한 블랙박스 난독화 도구입니다. Obfuscapk 은 소스 코드 없이도 안드로이드 앱을 난독화할 수 있는 모듈식 Python 도구입니다. apktool을 사용하여 원본 apk 파일을 디컴파일하고, 디컴파일된 smali 코드, 리소스 및 매니페스트에 일부 난독화 기술을 적용한 후 새 애플리케이션을 빌드합니다. 난독화된 앱은 원본과 동일한 기능을 유지하지만,...

portia

⚠️ 참고: 이 도구는 더 이상 적극적으로 유지보수되지 않습니다. portia Portia는 낮은 권한의 계정이 손상된 후에 내부 네트워크 침투 테스트에서 일반적으로 수행되는 여러 기술을 자동화하는 것을 목표로 합니다. 권한 상승 측면 이동 편의 모듈 Portia는 다른 거미를 잡아먹는 깡충거미의 한 속屬입니다. - 일반적으로 더 큰 동물에게서만 볼 수 있는 지능적인 사냥 행동과 문제 해결 능력으로 유명합니다. 새로운 기능이 추가되었습니다. 새 스크립트는 'hopandhack.py'입니다. 새 스크립트 ‘hopandhack‘은...

joomlavs

joomlavs 블랙박스 방식의 Ruby 기반 Joomla 취약점 스캐너 무엇인가요? JoomlaVS는 Ruby 애플리케이션으로, Joomla 설치의 취약점 악용 가능성을 자동으로 평가하는 데 도움을 줍니다. 기본적인 핑거프린팅을 지원하며, 구성 요소, 모듈, 템플릿의 취약점뿐만 아니라 Joomla 자체에 존재하는 취약점도 스캔할 수 있습니다. 설치 방법 JoomlaVS는 현재까지 Debian에서만 테스트되었지만, 대부분의 운영 체제에서 설치 과정은 비슷할 것입니다. 1. 시스템에 Ruby 2.4.4 이상이 설치되어 있는지...

CVE-2026-103762: Missing Authorization

SiYuan before v3.8.5 contains a missing authorization vulnerability in the getRefCreateSavePath, getShorthandSavePath, and getDocCreateSavePath endpoints that allows read-only publish visitors to learn unpublished notebook box IDs. Attackers with read-only or anonymous publish access can POST any...

CorrectGuard: Eyes-Off Correctness Estimation for Black-Box Security Guardrails

AI services increasingly rely on black-box security guardrails, yet privacy-preserving model auditing regimes often cannot measure how well these systems perform in both a human eyes-off production setting, which disallows human inspection of user input, and a machine eyes-off setting, which...

AGAS

推薦システムに対する効率的かつ効果的なエージェント型グループ・シリング攻撃 これは論文「An Efficient and Effective Agentic Group Shilling Attack on Recommender Systems」の公式コードです。本論文ではAGASを紹介します。これは、ブラックボックスの協調フィルタリング推薦システムに対するLLM駆動のシリング攻撃です。1つの Coordinator が、一連のラウンドにわたって偽ユーザーのworker プールを統制します。各ラウンドで、Coordinatorは8つの戦略のうち1つを選択し、...

blackbox-pentesting-infsecos

Black-Box Penetration Test — SecOS:1 VulnHub Overview Full black-box penetration test against SecOS:1 , a deliberately vulnerable CTF machine from VulnHub. Objective: simulate a real-world attacker with zero prior knowledge and achieve root-level compromise, evidenced by retrieving /root/flag.txt...

CLEANSTART-2024-JR49500 Use after free in dialog box handling in Windows in Google Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in dialog box handling in Windows in Google Chrome prior to 92...

CollageAttack: Exploiting Cross-Modal Alignment Flaws in T2I Models through Spatial Text Composition

Text-to-image T2I models have substantially improved in language understanding, in-image text rendering, and visual composition, while their safety mechanisms do not always keep pace with these capabilities. This creates a cross-modal attack surface in which harmful semantics can remain...

DeMark: A Query-Free Black-Box Attack for Quality-Preserving Audio Watermark Removal

Audio watermarking protects digital speech by embedding imperceptible signals for ownership verification and misuse tracing. However, the security of learning-based watermarking remains insufficiently understood under realistic adversarial removal, where attackers cannot access or query the...

AgentXploit: Autonomous Repository-To-Runtime Red-Teaming for AI Agents

AI agents combine language models with external data and tools that can modify files, call APIs, or execute code. Security failures can arise when adversarial content changes an agent's tool use or when the surrounding software contains vulnerabilities such as path traversal or command injection...

Region-Level Black-Box Defense against Stealthy Embedding-Space Backdoors in CLIP

Contrastive Language--Image Pretraining CLIP has emerged as a dominant vision backbone due to its strong transferability and zero-shot capabilities. However, recent studies reveal a critical vulnerability: embedding-space backdoor attacks. By poisoning only a tiny fraction of image--text pairs,...

JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models

Models trained with reinforcement learning for calibrated decisions RLCD, such as Jev, answer a typed question about an input, the state, with a probability, a choice, or a score, and software acts on the answer without a person reading it. Their robustness has not been measured: adversarial...

SUSE CVE-2026-96611

FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In movreadispe, uint32t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INTMAX to become negative. In readimagegrid, accumulating these value...

ENDOPROMPT: Victim-Side Pseudo-References for Utility Degradation

Prompt injection can degrade benign task performance without eliciting harmful content. Yet many attack objectives depend on task labels or predefined target responses. We present ENDOPROMPT, a white-box method that learns utility-degrading prefixes from unlabeled instructions. Its generator take...

Linux Distros Unpatched Vulnerability : CVE-2026-96611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In movreadispe, uint32t width/height values from a crafted HEIF ispe box are stored into...

TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models

Artificial intelligence AI models are increasingly deployed through remote services, making model misappropriation a growing concern. Existing approaches, including watermarking, fingerprinting, and model similarity analysis, primarily rely on predefined evidence or direct behavioral comparison a...