316 matches found
inspect_petri
Inspect Petri Welcome to Inspect Petri, an auditing agent that enables automated monitoring and interaction with language models to detect potential alignment issues, reward hacking, and other concerning behaviors. Petri helps you rapidly test concrete alignment hypotheses end‑to‑end. It: Generat...
heapinspect
HeapInspect Pwnning is an art. HeapInspect is designed to make heap much more prettier. Now this tool is a plugin ofnadbg. Try it! Features Free of gdb and other requirement Multi glibc support 2.19, 2.23-2.27 currently tested both 32bit and 64bit Nice UI to show heap HeapShower detailed...
CVE-2024-23742
CVE-2024-23742 An issue in Loom through 0.196.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. With this tool, we can check if the App is Vulnerable: After validation, we can inject our code, and get a shell Enjoy Your She...
CVE-2026-79827
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow...
EUVD-2026-101997
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow...
CVE-2026-79827
A heap buffer overflow vulnerability exists in the HPE NonStop Inspect Subsystem (specifically version T9226L01^ABW and earlier, T9226L02 ). This flaw could allow an attacker to corrupt the resume-execution address , potentially leading to a redirection of execution flow . The vulnerability may r...
CVE-2026-79827 HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow...
CVE-2026-79822
A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...
CVE-2026-79822
A security vulnerability in HPE NonStop TNS/X Native Inspect (specifically version T0903L02^AAL and earlier ) may result in address corruption and potential redirection of the execution flow. The vulnerability is associated with a Heap-based Buffer Overflow (CWE-122) and could lead to Denial of S...
CVE-2026-79822 HPE NonStop TNS/X Native Inspect - Execution flow vulnerability
A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...
EUVD-2026-101871
A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...
CVE-2026-109561
goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by updategoosemode. After a session uses Smart Approval mode, prompt-injected calls to...
EUVD-2026-97884
goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by updategoosemode. After a session uses Smart Approval mode, prompt-injected calls to...
CVE-2026-109561 goose from 1.28.0 before 1.44.0 Manual Approval Bypass via Read-Only Tool Annotations
goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by updategoosemode. After a session uses Smart Approval mode, prompt-injected calls to...
CVE-2026-109561
The goose tool (versions 1.28.0 before 1.44.0 ) is vulnerable to an authorization bypass in its permission handling. The root cause is that persisted read-only annotations are not cleared by the update_goose_mode function. This allows an attacker to use prompt injection to execute tools without u...
CVE-2026-109561 goose from 1.28.0 before 1.44.0 Manual Approval Bypass via Read-Only Tool Annotations
goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by updategoosemode. After a session uses Smart Approval mode, prompt-injected calls to...
CVE-2024-23740
CVE-2024-23740 A An issue in Kap through 3.6.0 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. There is a tool designed to automate the process of searching for vulnerabilities in electron:...
EEF-CVE-2026-105283 Internal error terms inspected into AshTypescript RPC error responses
Summary Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for...
CVE-2026-105283 Internal error terms inspected into AshTypescript RPC error responses
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for...
CVE-2024-23741
CVE-2024-23741 An issue in Hyper through 3.4.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. There is a tool designed to automate the process of searching for vulnerabilities in electron:...