24211 matches found
HAKIMIX
HAKIMIX Framework 🛡️🔥 HAKIMIX waa Framework awood badan o...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093586)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093586 advisory. An exploitable information disclosure vulnerability exists in the getdnodeofdata functionality of F2fs- Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093563)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093563 advisory. An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093571)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093571 advisory. An exploitable code execution vulnerability exists in the fsckchkorphannode functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093579)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093579 advisory. An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093564)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093564 advisory. An exploitable information disclosure vulnerability exists in the initnodemanager functionality of F2fs- Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesyste...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-build-tools (UTSA-2026-022372)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022372 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-build-tools (UTSA-2026-022370)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022370 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...
Improper Neutralization of Input Used for LLM Prompting
Overview strands-agents-tools is an A collection of specialized tools for Strands Agents Affected versions of this package are vulnerable to Improper Neutralization of Input Used for LLM Prompting via the pythonrepl function in src/strandstools/pythonrepl.py. An attacker can execute arbitrary...
CVE-2026-78379
Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...
CVE-2026-78379 Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools
Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...
EUVD-2026-65735
Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...
CVE-2026-78379 Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools
Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...
CVE-2026-78379
Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...
CVE-2026-55609
sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the exportstate and importstate tools in src/consciousness-explorer/mcp/server.js pass the...
POC-CVE-2025-5777
Questo repository non contiene un README...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.6 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.3.6 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...
CVE-2026-55540 PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, ispathwithindirectory uses os.path.abspath rather than os.path.realpath for the workspace boundary. A symlink inside workspace can point outside and still pass the check, allowing readfile and other code tools to access files...
WordPress WP DSGVO Tools (GDPR) plugin < 3.1.40 - Unauthenticated Sensitive Information Disclosure via Subject Access Request vulnerability
Unauthenticated Sensitive Information Disclosure via Subject Access Request vulnerability discovered by Shivamani Vastrala in WordPress Plugin WP DSGVO Tools GDPR versions 3.1.40...