Lucene search
+L

540 matches found

Kitploit
Kitploit
•added 2026/10/03 1:11 p.m.•11 views

aether

Aether v6.0 — スマートコントラクトセキュリティ解析フレームワーク バージョン 6.0 | v6.0の新機能 | 変更履歴 Aetherは、Solidityスマートコントラクトの解析、脆弱性の発見、Foundryベースの概念実証(PoC)テストの生成、メインネットフォーク上でのエクスプロイト検証を行うPythonベースのフレームワークです。Solidity AST解析、汚染解析、制御フローグラフ解析、クロスコントラクト解析、Halmosシンボリック実行、180以上のパターンベースの静的検出器、共有 SAGE 組織記憶を備えた協調型マルチエージェントLLMパイプライン...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/03 12:49 p.m.•23 views

sage

Sage 에이전트를 위한 안전 — AI 코딩 어시스턴트를 위한 Agent Detection & Response Sage는 AI 에이전트가 위험한 작업을 실행하지 못하도록 보호하는 경량 보안 계층입니다. 셸 명령, URL 가져오기, 파일 쓰기 등 도구 호출을 가로채서 실행 전에 여러 위협 탐지 계층과 대조합니다. 참고: Sage는 설치 방법에 따라 Norton Sage, Avast Sage 등 다른 제품명으로 표시될 수 있습니다. 자세한 내용은 브랜딩을 참조하세요. 주요 기능 URL 평판 — 클라우드 기반 멀웨어, 피싱, 사기...

6.2AI score
SaveExploits0References14
Kitploit
Kitploit
•added 2026/10/03 3:16 a.m.•12 views

sagex3-cve-2020-7388-poc

sagex3-cve-2020-7388-poc CVE-2020-7388 の概念実証エクスプロイトコードです。Sage X3 の AdxDSrv サービスに対する、SYSTEM 権限での未認証リモートコード実行 RCE を実証します。 Overview Sage X3 は、AdxAdmin コンポーネントの一部であるプロセス「AdxDSrv.exe」の下で、TCP/1818 ポート(デフォルト。変更可能)に管理サービスを公開しています。このサービスは、Sage X3 Console を介した Sage ERP...

10CVSS7.6AI score0.69444EPSS
SaveExploits3
Packet Storm News
Packet Storm News
•added 2026/10/01 12:00 a.m.•5 views

SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples

As machine learning increasingly relies on public, untrusted data sources, data poisoning attacks, which inject malicious examples into training data to induce misclassification of a chosen target, pose a growing threat. Existing defenses either assume zero ground-truth information about which...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/11 7:49 p.m.•10 views

sage v0.13.0

Sage Safety for Agents — Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layer...

6.1AI score
SaveExploits0References14
NVD
NVD
•added 2026/09/09 4:17 p.m.•13 views

CVE-2026-67403

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS0.00271EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/09 4:17 p.m.•10 views

CVE-2026-68484

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/09 3:49 p.m.•41 views

CVE-2026-67403

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS0.00271EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 3:49 p.m.•54 views

CVE-2026-67403

Cash Collect (Sage) has an improper authorization vulnerability in the Sage AR Automation API . Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non-predictable tenant identifier. The CVSS ...

9CVSS5.9AI score0.00271EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 3:49 p.m.•22 views

EUVD-2026-75060

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/09 3:49 p.m.•44 views

CVE-2026-68484

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/09 3:49 p.m.•11 views

CVE-2026-68484

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS5.9AI score0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/09 3:49 p.m.•10 views

CVE-2026-67403

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS5.9AI score0.00271EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 3:49 p.m.•16 views

EUVD-2026-75061

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 3:49 p.m.•27 views

CVE-2026-68484

Cash Collect by Sage contains an improper authorization vulnerability in the Sage AR Automation API . Administrative functions fail to properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and escalate to elevated privileges. The issue is ra...

9CVSS5.9AI score0.00271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•1 views

CVE-2026-68484: Missing Authorization

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•16 views

PT-2026-89080

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•17 views

PT-2026-89079

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•3 views

CVE-2026-67403: Authorization Bypass Through User-Controlled Key

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS5.8AI score0.00271EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/01 3:16 a.m.•11 views

CVE-2026-67395

A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...

5.9CVSS0.01099EPSS
SaveExploits0References1
Rows per page
Query Builder