448 matches found
BGGP
Binary Golf Grand Prix This repo contains files for the Binary Golf Grand Prix, sorted by year. This repo now lives here! https://github.com/binarygolf/bggp...
WordPress Competition Form Plugin <= 2.0 - Cross-Site Scripting
Competition Form WordPress plugin = 2.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires victim to visit a...
aixcc-afc-atlantis
Atlantis This repository contains Atlantis , Team Atlanta's Cyber Reasoning System CRS submitted to the AIxCC Final Competition AFC. Atlantis is designed to automatically discover and analyze vulnerabilities in software systems. The main system implementation is located in the...
silicon2022-capturetheflag
silicon2022-ctf About A 41 flag CTF using the RootTheBox platform. Infrastructure was deployed mostly on Azure Kubernetes Service. Terminal challenges were deployed via Docker images using a modified version of WeTTY Build Most challenges are built as Docker images. You can go into the respective...
mellivora
Mellivora Mellivora is a CTF engine written in PHP. Want a quick overview? Check out a screenshot gallery on imgur. Want a quick start? Use Mellivora with Docker. Features Arbitrary categories and challenges. Scoreboard with optional multiple team types. Manual or automatic free-text submission...
Scope-Gap Injection: Exploiting Evaluator Channel Blind Spots in the OpenClaw Agent Security Competition
This paper introduces Scope-Gap Injection SGI, an indirect prompt injection method for multi-stage LLM-agent safety pipelines. In the IJCAI 2026 OpenClaw Agent Security Attack Competition, each attack package is judged by a static skill scan S1, an LLM-judge safety check over the task and skill...
When Approval Becomes Execution: Authorization-Grounded Workflow Attacks on Tool-Using Agents
Tool-using language-model agents increasingly rely on local services for document access, approval management, and enterprise workflow execution. This paper studies an authorization-grounded workflow attack in the OpenClaw Agent Security Attack Competition, a controlled benchmark derived from...
BGGP
Binary Golf Grand Prix Questo repository contiene i file del Binary Golf Grand Prix, suddivisi per anno. BGGP è una competizione annuale di file di piccole dimensioni, in cui i partecipanti creano i file più piccoli possibili che eseguono una funzione specifica. I file non possono superare i 4096...
mlm-task-for-contextual-embedding (>=0.1.0, <=0.38.0), name-entity-extraction-for-contextual-embedding (>=0.1.0, <=0.6.0) +1 more potentially affected by CVE-2026-9856 via transformers (4.2.1)
transformers PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - mlm-task-for-contextual-embedding =0.1.0, =0.1.0, =0.1.3, =0.5.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...
DEFCON-UoA-students-competition
!Review Assignment Due Datehttps://classroom.github.com/asse...
ANT-2026-125WT6QC · supabase/supabase · denial-of-service
cpu-exhaustion low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-125WT6QC: Catastrophic backtracking in t-shirt competition email regex The get-tshirt-competition example...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the isoconnectind function in Bluetooth ISO, which accesses iso.pisk-conn during the “ev3” section without acquiring a lock. This may lead to null pointer dereferencing or competition conditions...
BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes
Prompt injection is a critical security threat in large language model LLM applications, where attackers hijack model behavior by embedding malicious instructions in user or external data. Existing detection methods only detect the presence of injection and refuse to respond upon detection,...
Windows App Store Privilege Escalation
The vulnerability of the Windows App Store application store for Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The Disruptive Impact of Large Language Models on Capture the Flag Competitions and the Path toward Fair Play
Capture the Flag CTF competitions are among cybersecurity's most effective training grounds, developing practical skill across cryptography, web exploitation, and binary exploitation. Large language models LLMs can now solve a growing share of challenges with minimal human input, raising urgent...
scoringengine v2.1.1
Scoring Engine Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface. Features Automated scheduling and execution of service checks Distributed...
Microsoft Windows Privilege Escalation
The vulnerability of Microsoft Windows application stores is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow attackers to enhance their privileges...
Linux kernel crypto_free_instance Heap Buffer Overflow DoS
The vulnerability of the cryptofreeinstance function in the crypto/algapi.c module of the Linux kernel’s cryptographic subsystem is related to situations where there is a competition for resources between different contexts. Exploiting this vulnerability could allow an attacker to compromise the...