EUVD-2026-88142

Authentication Bypass by Capture-replay in Apache Roller 6.1.5 allows an attacker who captures a valid WSSE digest authentication header to replay it and gain the victim's AtomPub authority, because the authentication does not enforce nonce uniqueness or timestamp freshness. Only installations th...

CVE-2026-82380 Apache Roller: CSRF protection bypass via self-generated salt validation

Cross-Site Request Forgery CSRF in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to perform state-changing actions under the victim's authority, because the CSRF validation filters accept a request that does not submit the required salt token, validating instead against a...

CVE-2026-82380

A Cross-Site Request Forgery (CSRF) vulnerability exists in Apache Roller 6.1.5 . The flaw is caused by CSRF validation filters incorrectly accepting requests that lack a required salt token , instead validating against a value the server itself generated for the request. This allows a remote att...

CVE-2026-82382 Apache Roller: Reflected cross-site scripting in the frontpage directory parameter

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...

CVE-2026-82383 Apache Roller: Anonymous setup action allows frontpage configuration tampering

Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global configuration value the frontpage weblog selection on any installed instance, because the setup action remains anonymously reachable after installatio...

CVE-2026-82383 Apache Roller: Anonymous setup action allows frontpage configuration tampering

Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global configuration value the frontpage weblog selection on any installed instance, because the setup action remains anonymously reachable after installatio...

EUVD-2026-88137

Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoint accepts vendor extension types that are deserialized during request parsing, before authentication. The servlet is...

LLM-MCP-Security-Field-Guide

🛡️ AIセキュリティフィールドガイド — LLM + MCPセキュリティ LLMアプリケーションおよびModel Context Protocol（MCP）デプロイメントのための、最も包括的で最新の、実務者第一のセキュリティリファレンス。 実際のCVE、実際の攻撃パターン、OWASPフレームワーク、レッドチーミングツール、実用的なチェックリストをカバー — 毎週更新。 このガイドが存在する理由 AIセキュリティの状況は2025年から2026年にかけて劇的に変化しました： 🔴 492台のMCPサーバー が認証なしで公開されました（Trend Micro、2026年） 🔴...

CVE-2025-27519

Below 権限昇格エクスプロイト CVE-2025-27519 このリポジトリには、Linux システム上の Below 権限昇格の脆弱性 CVE-2025-27519 を悪用するための概念実証 PoC Bash スクリプトが含まれています。このエクスプロイトにより、ローカルユーザーは below バイナリがエラーをログに記録する方法を悪用して、権限を root に昇格させることができます。 ⚠️ 警告: このスクリプトは教育目的および許可を得たペネトレーションテスト専用 です。所有していない、またはテストの許可がないシステムでは使用しないで ください。 脆弱性の概要 CVE:...

CVE-2026-82378

A critical Incorrect Authorization vulnerability exists in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 . The root cause is that the endpoint derives the authorizing identity from a request-supplied value instead of the authenticated session. An unauthenticated remote attacker who...

EUVD-2026-88133

Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote attacker who learns an outstanding request token for a configured site-wide consumer to bind that token to an arbitrary user account, including an administrator, by submitting ...

CVE-2026-82378 Apache Roller: OAuth authorization endpoint trusts request-supplied identity

Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote attacker who learns an outstanding request token for a configured site-wide consumer to bind that token to an arbitrary user account, including an administrator, by submitting ...

EUVD-2026-88132

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit h...

CVE-2026-101012

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be). The flaw is located within an unknown function in the makeresult.php file, where manipulation of the makeid argument allows for remote execution. Public exp...

CVE-2026-101012 mathurvishal CloudClassroom-PHP-Project makeresult.php sql injection

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit h...

Adaptive_Greedy_Local_Search

自适应贪心局部搜索 AGLS 语义保持的提示劫持：针对自动提示优化的黑盒对抗攻击 ICME 2026 摘要： 大型语言模型（LLMs）日益配备自动提示优化模块，这些模块会重写用户的输入，并在生成最终响应之前明确展示一个"改进后"的提示。尽管这种可见性旨在增强信任和用户控制，但优化器自主选择单一"最佳"候选的过程仍不受约束。攻击者可以劫持原始提示或由自动提示优化生成的提示，进行替代性重写，从而诱发语义漂移并完成劫持优化过程，进而严重影响 LLM...

EUVD-2026-88127

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store a crafted comment-author URL through the incoming Trackback endpoint when a published entry accepts comments and Trackbacks. The shipped...

CVE-2026-91204 Apache Roller: Stored javascript: URI in HTML comments

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an anonymous remote attacker to store a comment containing a javascript: URI link that survives HTML comment formatting and can execute script in the browser of a visitor who clicks it...

CVE-2026-91206 Apache Roller: Reflected XSS in the optional LDAP comment authenticator

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting through the optional LDAP comment authenticator, which writes request parameter values into its HTML form without escaping...

CVE-2026-91206

Apache Roller version 6.1.5 is vulnerable to reflected cross-site scripting (XSS) due to improper neutralization of input during web page generation. The flaw exists specifically in the optional LdapCommentAuthenticator , which writes request parameter values into its HTML form without proper esc...