Lucene search
+L

8 matches found

Kitploit
Kitploit
added 2026/09/13 9:20 a.m.6 views

cua-kit

CUA-Kit 一个用于在 Windows 和 macOS 系统上枚举和与计算机使用代理交互的工具包。 工具 工具| 描述| 输出 ---|---|--- cua-enum| 枚举计算机使用代理配置 Claude Code, Codex CLI, Cursor, Gemini CLI| .exe, .x64.o cua-exec| 通过包装器或直接 API 执行计算机使用代理 CLI 命令 Claude, Codex, Gemini, Cursor| .exe, .x64.o cua-poison| 用伪造的紧凑摘要毒化 Claude Code 会话| .exe, .x64.o 快速开始...

6.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.9 views

CVE-2026-34952

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS5.9AI score0.00444EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/03 10:53 p.m.2 views

CVE-2026-34952

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS5.9AI score0.00444EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/04/03 10:53 p.m.32 views

CVE-2026-34952 PraisonAI: Missing Authentication in WebSocket Gateway

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS0.00444EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/03 10:53 p.m.13 views

CVE-2026-34952 PraisonAI: Missing Authentication in WebSocket Gateway

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS6AI score
SaveExploits0References3
OSV
OSV
added 2026/04/01 11:28 p.m.9 views

GHSA-CFH6-VR3J-QC3G PraisonAI Has Missing Authentication in WebSocket Gateway

Summary The PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. Details gateway/server.py:242 source -...

9.1CVSS6AI score0.00444EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2026/04/01 11:28 p.m.15 views

PraisonAI Has Missing Authentication in WebSocket Gateway

Summary The PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. Details gateway/server.py:242 source -...

9.1CVSS6AI score0.00444EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/01 12:00 a.m.12 views

PT-2026-29828

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.87 Description The PraisonAI Gateway server lacks authentication for WebSocket connections at the /ws endpoint and exposes agent topology at the /info endpoint without authentication. This allows any network...

9.1CVSS6.1AI score0.00444EPSS
SaveExploits1References15
Rows per page
Query Builder