hotpatch-for-apache-log4j2

Log4jHotPatch Esta es una herramienta que inyecta un agente Java en un proceso JVM en ejecución. El agente intentará parchear el método lookup de todas las instancias cargadas de org.apache.logging.log4j.core.lookup.JndiLookup para que devuelvan incondicionalmente la cadena "Patched...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

satellite

satellite Satellite es un servicio de alojamiento de payloads web que filtra las solicitudes para asegurar que el objetivo correcto recibe el payload. También puede ser un servicio útil para alojar archivos que solo deben ser accedidos en circunstancias muy específicas. Guía de inicio rápido 1...

CVE-2026-18418: Out-of-bounds Read

The zbus proxy agent IPC backend in subsys/zbus/proxyagent/zbusproxyagentipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbusproxymsg carries a fixed-size channelname array as its last member, and nothing in the transport guarantees...

CVE-2026-108850: Server-Side Request Forgery (SSRF)

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed inline img elements in reportcontent ...

PT-2026-110183

Name of the Vulnerable Software and Affected Versions iFlytek Astron Agent versions prior to 1.1.3 Description An insecure direct object reference occurs when an application provides direct access to objects based on user-supplied input. This issue allows authenticated applications to resume paus...

CVE-2026-108864: Authorization Bypass Through User-Controlled Key

iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their eventid to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume...

CVE-2026-108600

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

CVE-2026-108592

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the...

CVE-2026-108593

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

EUVD-2026-96392

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

CVE-2026-108600

The open-multi-agent (@open-multi-agent/core) package (versions 1.5.0 through 1.21.2 ) is vulnerable to a link following vulnerability (CWE-59) within the file_write tool sandbox . This flaw allows an attacker to escape the workspace root and create files in unauthorized locations by using dangli...

CVE-2026-108600 open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling Symlink

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

CVE-2026-108600 open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling Symlink

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

CVE-2026-108593

The software 9router (versions 0.4.1 through 0.5.99 ) is vulnerable to a configuration injection vulnerability within the POST /api/cli-tools/hermes-settings endpoint. Authenticated dashboard users can exploit this by submitting a baseUrl containing double quotes and newlines, allowing them to in...

CVE-2026-108593 9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

EUVD-2026-96401

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

EUVD-2026-96402

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the...

CVE-2026-108592 mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the...

CVE-2026-108592

The mini-swe-agent software (versions 1.10.0 through 2.4.6 ) is vulnerable to an information exposure flaw within the BubblewrapEnvironment component. The root cause is that the underlying bwrap tool omits the --clearenv flag, causing sandboxed commands to inherit the host's environment variables...