92 matches found
DbgNexum
DbgNexum - 셸코드 인젝션 DbgNexum 은 Windows 디버깅 API와 공유 메모리파일 매핑를 사용하여 셸코드를 주입하기 위한 Proof-of-Concept입니다. 원격 메모리를 직접 읽고 쓰는 대신 컨텍스트 조작을 사용하여 대상 프로세스가 페이로드를 스스로 로드하고 실행하도록 강제합니다. 개요 인젝터는 대상 프로세스에 연결하고 일시 중단된 스레드를 생성합니다. 디버그 루프를 통해 하드웨어 중단점을 설정하고, 특정 반환 주소에서 실행이 트랩되도록 합니다. 각 트랩에서 인젝터는 CPU 레지스터를 수정하여 함수 호출을...
CVE-2026-41358 OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context
OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to enter agent context. Attackers can inject unauthorized thread messages through allowlisted user replies to bypass sender access controls and manipulate model context...
CVE-2026-41358: Origin Validation Error
OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to enter agent context. Attackers can inject unauthorized thread messages through allowlisted user replies to bypass sender access controls and manipulate model context...
CVE-2026-6587
A server-side request forgery (SSRF) vulnerability exists in vibrantlabsai RAGAS versions up to 0.4.3 (specifically prior to 0.4.4 ). The flaw is located in the Collections Module within the src/ragas/metrics/collections/multi_modal_faithfulness/util.py file, specifically affecting the _try_proce...
PT-2026-20397
Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...
CVE-2026-1440: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...
Securing AI Agents against Prompt Injection Attacks
Retrieval-augmented generation RAG systems have become widely used for enhancing large language model capabilities, but they introduce significant security vulnerabilities through prompt injection attacks. We present a comprehensive benchmark for evaluating prompt injection risks in RAG-enabled A...
Context Manipulation Attacks : Web Agents Are Susceptible to Corrupted Memory
Autonomous web navigation agents, which translate natural language instructions into sequences of browser actions, are increasingly deployed for complex tasks across e-commerce, information retrieval, and content discovery. Due to the stateless nature of large language models LLMs, these agents...
Advisory ROSA-SA-2021-1982
Software: system 219 OS: Cobalt 7.9 CVE-ID: CVE-2013-4392 CVE-Crit: HIGH CVE-DESC: systemd when updating file permissions allows local users to change SELinux permissions and security contexts for arbitrary files via a symbolic link attack on unspecified files. CVE-STATUS: default CVE-REV: defaul...
CVE-2016-10529
Droppy versions 3.5.0 does not perform any verification for cross-domain websocket requests. An attacker is able to make a specially crafted page that can send requests as the context of the currently logged in user. For example this means the malicious user could add a new admin account under hi...
Sitefinity Enterprise v7.2.53 - Persistent Vulnerability
Document Title: =============== Sitefinity Enterprise v7.2.53 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1369 Release Date: ============= 2015-01-06 Vulnerability Laboratory ID VL-ID: ====================================...
Social Engine 4.2.5 - Multiple Vulnerabilities
No description provided by source. Title: ====== Social Engine v4.2.5 - Multiple Web Vulnerabilities Date: ===== 2012-07-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=672 VL-ID: ===== 672 Common Vulnerability Scoring System: ==================================== 3...
ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities
No description provided by source. Title: ====== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Date: ===== 2012-11-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=689 VL-ID: ===== 689 Common Vulnerability Scoring System: ====================================...
ILIAS eLearning CMS 4.3.4 & 4.4 - Persistent XSS
No description provided by source. Document Title: =============== ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Notes Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1122 Release Date: ============= 2013-10-27 Vulnerability Laboratory I...
TP Link Gateway 3.12.4 - Multiple Vulnerabilities
No description provided by source. Title: ====== TP Link Gateway v3.12.4 - Multiple Web Vulnerabilities Date: ===== 2012-06-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=613 VL-ID: ===== 613 Common Vulnerability Scoring System: ====================================...
ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Notes Web Vulnerability
Document Title: =============== ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Notes Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1122 Release Date: ============= 2013-10-27 Vulnerability Laboratory ID VL-ID:...
Olat CMS 7.8.0.1 - Persistent Calender Web Vulnerability
Document Title: =============== Olat CMS 7.8.0.1 - Persistent Calender Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1125 CVE-ID: 2013-6793 CVE-ID: 2013-6794 Release Date: ============= 2013-10-28 Vulnerability Laboratory ID VL-ID:...
Zikula CMS 1.3.5 - Multiple Vulnerabilities
Document Title: =============== Zikula CMS v1.3.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1114 Release Date: ============= 2013-10-16 Vulnerability Laboratory ID VL-ID: ==================================== 1114 Comm...
Dell PacketTrap MSP RMM 6.6.x - Multiple Vulnerabilities
Document Title: =============== Dell PacketTrap MSP RMM 6.6.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=791 Release Date: ============= 2013-07-16 Vulnerability Laboratory ID VL-ID: ==================================== 79...
Barracuda Backup - Cross Site Scripting Vulnerability
Document Title: =============== Barracuda Backup - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=799 BARRACUDA NETWORK SECURITY ID: BNSEC-1949 Release Date: ============= 2013-06-10 Vulnerability Laboratory ID VL-ID:...