MUZZLE: Adaptive Agentic Red-Teaming of Web Agents against Indirect Prompt Injection Attacks

Large language model LLM based web agents are increasingly deployed to automate complex online tasks by directly interacting with web sites and performing actions on users' behalf. While these agents offer powerful capabilities, their design exposes them to indirect prompt injection attacks...

EUVD-2025-201888

Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory. If exploited, application-specific files may be accessed from other malicious applications...

EUVD-2006-5726

Malware in sbrugna...

EUVD-2005-2443

Malware in sbrugna...

EUVD-2006-2304

Malware in sbrugna...

EUVD-2007-4805

Malware in sbrugna...

EUVD-2012-4829

Malware in sbrugna...

EUVD-2011-2346

Malware in sbrugna...

EUVD-2008-4108

Malware in sbrugna...

EUVD-2025-26810

Malicious code in bioql PyPI...

EUVD-2024-47209

Malicious code in bioql PyPI...

CVE-2024-6051

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13...

CVE-2024-6051

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13...

CVE-2024-6051 Cross Application Scripting in Redlink SDK

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13...

CVE-2024-6051 Cross Application Scripting in Redlink SDK

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13...

CVE-2024-6051

CVE-2024-6051 : A Cross‑Site (Cross Application) Scripting vulnerability affects the Vercom S.A. Redlink SDK (versions through 1.13). The issue allows local code injection and manipulation of the vulnerable application’s view in certain conditions. Affected product/function: Redlink SDK by Vercom...

PT-2024-37346 · Vercom S.A. · Redlink Sdk

Name of the Vulnerable Software and Affected Versions: Redlink SDK versions through 1.13 Description: A Cross Application Scripting vulnerability is present in Vercom S.A. Redlink SDK. In certain cases, it allows local code injection and manipulation of the view of a vulnerable application...

SAP Document Builder Code Issue Vulnerability

SAP Document Builder is a content-driven cross-application solution from SAP, Germany. A code issue vulnerability exists in SAP Document Builder that originates from an authenticated attacker being able to upload malicious files to the service that can be accessed, modified, or made unavailable i...

CVE-2023-35683

In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2014-0119

Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to 1 read arbitrary files via a crafted web application that provides an XML external entity...