Lucene search
+L

16657 matches found

Spring Security Advisories
Spring Security Advisories
added 2026/06/15 12:0 a.m.29 views

Tool Calling in Spring AI 2.0: A Composable, Agentic Architecture

Tool calling — the ability for an AI model to invoke application-defined functions and act on the results — is the essential building block of agentic AI systems. A model that can discover information, take action, and loop until a goal is reached is an agent. Spring AI 2.0 rearchitects tool...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/15 12:0 a.m.29 views

PT-2026-49187

Name of the Vulnerable Software and Affected Versions OttoKit versions prior to 1.1.28 Description Unauthenticated PHP Object Injection occurs in the software. PHP Object Injection is a vulnerability that allows an attacker to pass malicious serialized objects into the application, which can lead...

9.8CVSS6AI score0.005EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/06/12 11:53 p.m.112 views

kiro-cybersecurity-skills

CyberSecurity Skills A collection of 15 security workflows co...

5.5AI score
SaveExploits0
Cvelist
Cvelist
added 2026/06/12 6:44 p.m.42 views

CVE-2026-50287 Missing Authentication for Critical Function in @agenticmail/mcp

AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a Streamable HTTP transport when started with --http or MCPHTTP=1. In that mode, the /mcp endpoint accepts requests without any HTTP authentication layer. A remote client can...

8.7CVSS0.00359EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/12 4:16 p.m.18 views

CVE-2026-40677

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution...

7.7CVSS0.00435EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 2:29 p.m.17 views

EUVD-2026-36488

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution...

7.7CVSS5.7AI score0.00435EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/12 2:29 p.m.60 views

CVE-2026-40677

The vulnerability CVE-2026-40677 affects AMD optional tools that use insecure HTTP transport, enabling a potential attacker to perform a man-in-the-middle attack and potentially achieve arbitrary code execution. The issue stems from unencrypted transport within these tools, which could allow inte...

7.7CVSS5.7AI score0.00435EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/12 2:29 p.m.14 views

CVE-2026-40677

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution...

7.7CVSS5.7AI score0.00435EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/12 2:29 p.m.43 views

CVE-2026-40677

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution...

7.7CVSS0.00435EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/06/12 9:19 a.m.246 views

Exploit for CVE-2026-35273

🚨 CVE-2026-35273 - Oracle PeopleSoft PeopleTools Unauthenticat...

9.8CVSS6.3AI score0.95473EPSS
SaveExploits3
NCSC
NCSC
added 2026/06/12 7:25 a.m.14 views

Vulnerability handling in Oracle PeopleSoft Enterprise PeopleTools

Oracle has identified a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62. This vulnerability allows unauthorized attackers to exploit the system via HTTP remotely. This can lead to remote code execution, which may result in the complete takeover of the system. The...

9.8CVSS6.1AI score0.95473EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2026/06/12 12:0 a.m.23 views

PT-2026-48888

Name of the Vulnerable Software and Affected Versions AMD optional tools affected versions not specified Description The use of insecure HTTP transport within the auto-updater allows for a man-in-the-middle attack, which is a technique where an attacker intercepts communication between two partie...

7.7CVSS5.6AI score0.00435EPSS
SaveExploits0References7
NVD
NVD
added 2026/06/11 9:16 p.m.16 views

CVE-2026-53818

OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. Attackers can invoke owner-only behavior through the affected loopback path to execute restricted tools...

6.9CVSS0.00096EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/11 9:16 p.m.14 views

CVE-2026-53814

OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of hook-appropriate scope. Attackers with a valid hook token can exploit the /hooks/agent endpoint to cause spawned CLI runtimes ...

8.7CVSS0.00281EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/11 9:13 p.m.9 views

Incorrect Privilege Assignment

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Privilege Assignment due to the incorrect assignment of owner-scoped MCP loopback authority to hook-triggered agent processes. An attacker can perform unauthorized privileged...

8.7CVSS5.9AI score0.00281EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/06/11 8:48 p.m.14 views

CVE-2026-12024

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.4AI score0.00158EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/06/11 8:9 p.m.41 views

CVE-2026-53818 OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback

OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. Attackers can invoke owner-only behavior through the affected loopback path to execute restricted tools...

6.9CVSS0.00096EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/11 8:9 p.m.8 views

CVE-2026-53818 OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback

OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. Attackers can invoke owner-only behavior through the affected loopback path to execute restricted tools...

6.9CVSS5.4AI score0.00096EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/11 8:9 p.m.8 views

CVE-2026-53818 OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback

OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. Attackers can invoke owner-only behavior through the affected loopback path to execute restricted tools...

6.9CVSS6AI score
SaveExploits0References5
CVE
CVE
added 2026/06/11 8:9 p.m.65 views

CVE-2026-53818

OpenClaw CVE-2026-53818 affects OpenClaw prior to 2026.4.24. It describes an authorization bypass in the MCP loopback feature that lets non-owner callers skip owner-only tool policies and before-tool-call hooks, potentially causing invocation of owner-only behavior to execute restricted tools whe...

6.9CVSS5.6AI score0.00096EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder