deleting-the-trace

Control-token injection attacks on tool-using agents Code and logged measurements for a study of two input-level attacks on tool-using language model agents. The first attack appends a short string of a model's own channel-control tokens to untrusted input; the tokenizer reads it as an...

CVE-2026-119377

SQLite versions prior to 3.54.0 are vulnerable to an authorization bypass in the lookupName() function. The root cause is that the authorizer is only invoked for the USING column of the first joined table. This allows an attacker to execute SQL queries that bypass sqlite3_set_authorizer() SQLITE_...

CVE-2026-119377 SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

CVE-2026-119377 SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

sqlite-fj-using-auth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-fj-using-auth Write-up: https://abraxaslabs.tech/research/sqlite-fj-using-auth sqlite-fj-using-auth Class: Privilege leftover Reach: Local SQLite 3.53.4 b09c88c / SOURCEID 2026-07-24 19:02:57...

Ignored, Not Refused: What Low Prompt-Injection Success Rates Hide in Small Tool-Using Agents

Tool-using agents read untrusted external content, which exposes them to indirect prompt injection IPI, where hidden instructions hijack the agent's tool calls. Benchmarks measure IPI security by the attack success rate ASR, which treats every failed attack as a successful defense. To test this...

When Approval Becomes Execution: Authorization-Grounded Workflow Attacks on Tool-Using Agents

Tool-using language-model agents increasingly rely on local services for document access, approval management, and enterprise workflow execution. This paper studies an authorization-grounded workflow attack in the OpenClaw Agent Security Attack Competition, a controlled benchmark derived from...

CT0: Cybersecurity Transformer

General-purpose frontier models are large, expensive to run, and increasingly reluctant to engage with authorised defensive- and offensive-security work. We ask the opposite question: how small can a cybersecurity-specialist transformer be while remaining genuinely useful to a security...

CreepScope: Measuring Post-Use Authorization Exposure in Tool-Using Agents

Authorization checks at individual tool calls do not reveal how long earlier authority remains usable. We study this lifecycle failure as privilege creep: a capability stays reachable after its last justified workflow step. We present CreepScope, a trace-oriented evaluation protocol that samples...

CVE-2026-105990

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data name, email, telephone, postal address, message and payment metadata o...

CVE-2026-105989 Accept PayPal Payments using Contact Form 7 < 4.0.7 - Unauthenticated Transaction Status Forgery

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments...

WordPress Accept PayPal Payments using Contact Form 7 plugin < 4.0.7 - Unauthenticated PII Disclosure vulnerability

Unauthenticated PII Disclosure vulnerability discovered by Enrico Marcolini, Claudio Marchesini, Dottor Marc in WordPress Plugin Accept PayPal Payments using Contact Form 7 versions 4.0.7...

CVE-2026-105990

The Accept PayPal Payments using Contact Form 7 WordPress plugin, in versions prior to 4.0.7 , is vulnerable to an unauthenticated PII disclosure . The root cause is a lack of authorization checks when exporting stored form submissions. This flaw allows unauthenticated attackers to download sensi...

CVE-2026-105989 Accept PayPal Payments using Contact Form 7 < 4.0.7 - Unauthenticated Transaction Status Forgery

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments...

CVE-2026-105990 Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Disclosure via CSV Export

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data name, email, telephone, postal address, message and payment metadata o...

CVE-2026-105990 Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Disclosure via CSV Export

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data name, email, telephone, postal address, message and payment metadata o...

CVE-2026-105989

The Accept PayPal Payments using Contact Form 7 WordPress plugin, in versions before 4.0.7 , is vulnerable to unauthenticated transaction status forgery. The root cause is a lack of authorization and request-validation checks on one of its AJAX actions. This allows an unauthenticated attacker to ...

CVE-2026-105989: Missing Authorization

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments...

CVE-2026-94666

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1...

EUVD-2026-95625

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1...