HLF_TxTime_spoofing

HLFTxTimespoofing HLFTxTimespoofing: una PoC que cubre el problema de la manipulación de la hora de las transacciones usando GetTxTimestamp o GetHistoryForKey en la blockchain Hyperledger Fabric. Probado en v2.5.5 y v3.0.0-beta. El proyecto consta de varias partes: 1. timeinsecure: variante del...

CVE-2026-61439: Initialization of a Resource with an Insecure Default

PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked. Attackers can submit single-vector prompt injection attacks such as instruction overrides or financi...

Servant, Stalker, Predator: How an Honest, Helpful, and Harmless (3H) Agent Unlocks Adversarial Skills

This paper identifies and analyzes a novel vulnerability class in Model Context Protocol MCP based agent systems. The attack chain describes and demonstrates how benign, individually authorized tasks can be orchestrated to produce harmful emergent behaviors. Through systematic analysis using the...