php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor Remote Code Execution PHP 8.1.0-dev Backdoor System Shell Script PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by...

Agent-Skills-Security-Standard

This repository does not have a README...

CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515: File Upload Vulnerability in Agent DVR Information Description In iSpyConnect.com Agent DVR 5.1.6.0, there is a lack of verification of file type for sound file uploads. This allows an authenticated user to upload any file type through the upload audio component simply by toggling...

CVE-2025-4660

Description A PoC for CVE-2025-4660, Forescout SecureConnector RCE forescoutredirect.py This is the exploit itself where you can redirect an agent to a specific IP address under the attackers control forescoutc2.py A simple C2 implementation that speaks the ForeScout SecureConnector language...

CVE-2025-26244

CVE-2025-26244-POC The code to exploit this vulnerability can be seen in 'spoof.go'. This imitates as an agent to the C2 server. In order to run this vulnerability we need to know: 1. The listener IP address and Port 2. The public key of the listener. 3. The first time check in URL of the listene...

agent-scanning

Control your AI agents. Track costs. Stay compliant. open-souce What It Does One dashboard to manage your AI team. Feature| How It Helps ---|--- Connect your agents| Plug in OpenAI, Anthropic, or custom agents Set goals & budgets| Assign work, cap costs, define success Watch in real-time| See wha...

osquery_cve-2024-23443

Proof of Concept POC CVE-2024-23443 hpbiososquery Add osqery extension HP BIOS WMI to Elastic Agent Dependencies pip install pywin32 pip install osquery pip install pyinstaller Build pyinstaller --onefile hpbiosenumeration.py Install 1. Copy extension to Elastic agent location copy...

Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis

1. Native API & APC Injection The x64dbg memory dump reveals that Agent Tesla uses Native API NT API calls for low-level operations, including APC Asynchronous Procedure Call injection. Key Functions Observed: NtQueueApcThread – Injects code into a target thread via APC. NtReadVirtualMemory –...

SBOM-VEX-Taint-Analysis

SBOM → VEX Agent Automatically generate signed CycloneDX VEX documents from SBOMs using a secure multi-agent AI pipeline, built in accordance with the OWASP GenAI Security Project guidelines. The Problem Generating an SBOM surfaces hundreds of CVEs. In practice, over 90% are not exploitable in a...

StepJack

StepJack: Benchmarking Computer-Use Agent Safety Against Multi-Step Indirect Prompt Injection Setup 1. Python Environment Setup First, install all dependencies and ensure you’re running Python 3.10. conda create -n stepjack python=3.10 conda activate stepjack pip install -r requirements.txt 2...

CVE-2019-19231

CVE-2019-19231 https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html...

OpsGuard-simulation

OpsGuard - Simulation Dashboard 🖥️ This is the Frontend UI for OpsGuard. It serves as a visual "Brain" to demonstrate the autonomous SRE agent in action. Since OpsGuard is a backend-first agent, this dashboard is designed to simulate a production environment and visualize the agent's invisible...

prompt_injection

Cross-Surface Prompt Injection Benchmark Benchmark for measuring where in a tool-using LLM agent's execution pipeline a prompt injection defense fires — and where it doesn't. Embeds unique canary tokens SECRET-A-F0-98 in injected payloads and tracks them at four pipeline stages: exposed → persist...

CVE-2021-42697

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments. References MITRE Akka blog Arbitrary nesting of...

CVE-2024-46982-Reproduction

Getting Started 1. Install Node.js LTS 2. npm install 3. npm run build 4. npm run start Exploitation 1: Stored XSS via Cache Poisoning 1. Send the following HTTP request Attack Request using any HTTP client. GET /poc?nextDataReq=1 HTTP/1.1 Host: localhost:3000 User-Agent: alert'XSS'...

CKA-Agent

ICML 2026 & ICLR 2026 AIWILD CKA-Agent: Bypassing LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search 🛡️ Defense towards CKA TurnGate is a response-aware defense mechanism designed to detect and mitigate hidden malicious intent in multi-turn dialogue systems. Defending...

CVE-2026-44706

SQL Injection in Chatwoot FilterService A proof-of-concept exploit for CVE-2026-44706, a SQL Injection vulnerability in Chatwoot's FilterServiceltgtfiltervalues that allows any authenticated agent to read the entire PostgreSQL database including user credentials and API tokens. Read the full...

PYSEC-2026-4247 PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

Call API localhost-only authentication bypass via spoofed Host header Summary PraisonAI's patched PRAISONAICALLAUTH=disabled safeguard for the n8n/call agent invocation API can be bypassed with a spoofed Host: 127.0.0.1 header, allowing an unauthenticated network caller to list and invoke...

React19-fix-vibecoders

React 19 & Next.js Security Fix Prompts for AI Agents 🚨 CRITICAL SECURITY VULNERABILITY - CVE-2025-55182 & CVE-2025-66478 This repository contains reusable prompts to help AI coding assistants automatically fix critical React/Next.js security vulnerabilities. 📋 What's Inside SECURITYFIXPROMPT.md...

SkillsGuard

Support Development If SkillsGuard protects your pipeline, consider supporting ongoing research and new detection rules. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. Static security scanner for AI agent skill packages. Detects...