blackbox-pentesting-infsecos

Black-Box Penetration Test — SecOS:1 VulnHub Overview Full black-box penetration test against SecOS:1 , a deliberately vulnerable CTF machine from VulnHub. Objective: simulate a real-world attacker with zero prior knowledge and achieve root-level compromise, evidenced by retrieving /root/flag.txt...

The vulnerability of the PostgresConnector.connect() function on the MCP-server, when used to interact with DBHub databases, allows an attacker to gain unauthorized access for read and write operations, or to execute arbitrary code.

The vulnerability of the PostgresConnector.connect function on the MCP-server, when used to interact with DBHub databases, is related to the use of an incomplete black list. Exploiting this vulnerability could allow an attacker to gain unauthorized read and write access, or execute arbitrary code...

CLEANSTART-2024-EN29810 Versions of the package black before 24

Security vulnerability affects the black package. Versions of the package black before 24...

CVE-2026-98060

A flaw was found in the Linux kernel. A local user with permissions to load Berkeley Packet Filter BPF programs can cause a Denial of Service DoS or potentially achieve privilege escalation. The BPF verifier fails to prevent resilient lock operations within red-black tree comparison callbacks,...

CollageAttack: Exploiting Cross-Modal Alignment Flaws in T2I Models through Spatial Text Composition

Text-to-image T2I models have substantially improved in language understanding, in-image text rendering, and visual composition, while their safety mechanisms do not always keep pace with these capabilities. This creates a cross-modal attack surface in which harmful semantics can remain...

DeMark: A Query-Free Black-Box Attack for Quality-Preserving Audio Watermark Removal

Audio watermarking protects digital speech by embedding imperceptible signals for ownership verification and misuse tracing. However, the security of learning-based watermarking remains insufficiently understood under realistic adversarial removal, where attackers cannot access or query the...

OESA-2026-4064 python-black security update

The uncompromising code formatter Security Fixes: Black is the uncompromising Python code formatter. Starting in version 24.3.0 and prior to version 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was...

Region-Level Black-Box Defense against Stealthy Embedding-Space Backdoors in CLIP

Contrastive Language--Image Pretraining CLIP has emerged as a dominant vision backbone due to its strong transferability and zero-shot capabilities. However, recent studies reveal a critical vulnerability: embedding-space backdoor attacks. By poisoning only a tiny fraction of image--text pairs,...

JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models

Models trained with reinforcement learning for calibrated decisions RLCD, such as Jev, answer a typed question about an input, the state, with a probability, a choice, or a score, and software acts on the answer without a person reading it. Their robustness has not been measured: adversarial...

CVE-2026-97061

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance. Attackers can query the SearchController or Search::PlaylistsController endpoints with blank or targeted search parameter...

CVE-2026-97061 Black Candy through 3.2.1 Information Disclosure via Playlist Search

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance. Attackers can query the SearchController or Search::PlaylistsController endpoints with blank or targeted search parameter...

CVE-2026-97061 Black Candy through 3.2.1 Information Disclosure via Playlist Search

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance. Attackers can query the SearchController or Search::PlaylistsController endpoints with blank or targeted search parameter...

CVE-2026-97061

Versions of Black Candy up to and including 3.2.1 are vulnerable to an information disclosure flaw. The application fails to scope playlist search queries to the currently authenticated session user. Consequently, any authenticated user can query the SearchController or Search::PlaylistsControlle...

EUVD-2026-85886

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance. Attackers can query the SearchController or Search::PlaylistsController endpoints with blank or targeted search parameter...

CVE-2026-97061 Black Candy through 3.2.1 Information Disclosure via Playlist Search

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance. Attackers can query the SearchController or Search::PlaylistsController endpoints with blank or targeted search parameter...

PT-2026-97803

Name of the Vulnerable Software and Affected Versions Black Candy versions prior to 3.2.2 Description An issue exists where playlist search queries are not scoped to the authenticated session user. This allows any authenticated user to enumerate all playlists on the instance. Attackers can use...

CVE-2026-97061: Missing Authorization

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance. Attackers can query the SearchController or Search::PlaylistsController endpoints with blank or targeted search parameter...

TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models

Artificial intelligence AI models are increasingly deployed through remote services, making model misappropriation a growing concern. Existing approaches, including watermarking, fingerprinting, and model similarity analysis, primarily rely on predefined evidence or direct behavioral comparison a...

ROS-20260923-73-0003

The vulnerability in python-black is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260923-73-0002

The vulnerability in python-black is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...