Lucene search
+L

540 matches found

Kitploit
Kitploit
•added 2026/10/05 10:31 a.m.•24 views

sage

Sage Safety for Agents — Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layer...

6.3AI score
SaveExploits0References14
Kitploit
Kitploit
•added 2026/10/05 4:01 a.m.•12 views

aether

Aether v6.0 — Smart Contract Security Analysis Framework Version 6.0 | What's New in v6.0 | Changelog Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainne...

6.3AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/05 2:00 a.m.•12 views

sagex3-cve-2020-7388-poc

sagex3-cve-2020-7388-poc Proof of concept exploit code for CVE-2020-7388, an unauthenticated RCE as SYSTEM on Sage X3's AdxDSrv Service Overview Sage X3 exposes an administrative service on port TCP/1818 default, but changeable under the process "AdxDSrv.exe," part of the AdxAdmin component. This...

10CVSS7.8AI score0.69444EPSS
SaveExploits3
Packet Storm News
Packet Storm News
•added 2026/10/01 12:00 a.m.•7 views

SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples

As machine learning increasingly relies on public, untrusted data sources, data poisoning attacks, which inject malicious examples into training data to induce misclassification of a chosen target, pose a growing threat. Existing defenses either assume zero ground-truth information about which...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/11 7:49 p.m.•10 views

sage v0.13.0

Sage Safety for Agents — Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layer...

6.1AI score
SaveExploits0References14
NVD
NVD
•added 2026/09/09 4:17 p.m.•14 views

CVE-2026-67403

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS0.00271EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/09 4:17 p.m.•11 views

CVE-2026-68484

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/09 3:49 p.m.•41 views

CVE-2026-67403

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS0.00271EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 3:49 p.m.•22 views

EUVD-2026-75060

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/09 3:49 p.m.•44 views

CVE-2026-68484

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS0.00271EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 3:49 p.m.•55 views

CVE-2026-67403

Cash Collect (Sage) has an improper authorization vulnerability in the Sage AR Automation API . Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non-predictable tenant identifier. The CVSS ...

9CVSS5.9AI score0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/09 3:49 p.m.•10 views

CVE-2026-67403

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS5.9AI score0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/09 3:49 p.m.•13 views

CVE-2026-68484

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS5.9AI score0.00271EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 3:49 p.m.•16 views

EUVD-2026-75061

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 3:49 p.m.•29 views

CVE-2026-68484

Cash Collect by Sage contains an improper authorization vulnerability in the Sage AR Automation API . Administrative functions fail to properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and escalate to elevated privileges. The issue is ra...

9CVSS5.9AI score0.00271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•2 views

CVE-2026-68484: Missing Authorization

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•17 views

PT-2026-89080

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•4 views

CVE-2026-67403: Authorization Bypass Through User-Controlled Key

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•17 views

PT-2026-89079

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/01 3:16 a.m.•11 views

CVE-2026-67395

A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...

5.9CVSS0.01099EPSS
SaveExploits0References1
Rows per page
Query Builder