60 matches found
-CTT-NSP-Convergent-Time-Theory---Network-Stack-Projection-CVE-2026-24858-
-CTT-NSP-收敛时间理论---网络栈投影-CVE-2026-24858- 一个概念验证（PoC），演示了三维纳维-斯托克斯CTT公式在数据包流优化与防御绕过中的应用。 . CTT-NSP：收敛时间理论 - 网络栈投影 🌀 概述 CTT-NSP是一个概念验证（PoC），演示了一种通过分形时间分层实现载荷投递的新方法。通过应用三维不可压缩纳维-斯托克斯方程的收敛时间理论（CTT）公式，我们将静态的漏洞利用载荷转化为动态的"流体"流动。 该载荷并非以单一、高特征信号的执行方式呈现，而是被映射到33个时间层（L=33）上。这确保了攻击的能量（即数字特征）按照色散系数 \alpha...
CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability
...
Protection Mechanism Failure
Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...
CVE-2026-60086
PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...
CVE-2026-60086
PraisonAI before 4.6.78 contains a prompt injection defense bypass. The defense only blocks threats classified as CRITICAL and requires three or more detector families to match. Attackers can craft single- or double-vector prompt injections rated HIGH that pass through unblocked to reach the mode...
CVE-2026-60086 PraisonAI before 4.6.78 Prompt Injection Defense Bypass
PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...
CVE-2026-60086 PraisonAI before 4.6.78 Prompt Injection Defense Bypass
PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...
CVE-2026-60086
PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...
CVE-2026-41338 OpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File Operations
OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses. Attackers can exploit check-then-act patterns in applypatch, remove, and mkdir operations to manipulate files between validation and execution...
GHSA-RM5C-4RMF-VVHW OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses
Summary Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: Released workspace-only applypatch remove and mkdir operations were still check-then-act, but the draft overstates scope by...
CVE-2025-69783
A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...
API Security for AI Agents: Why Protection Has Never Been More Important.
For years, a lot of risky APIs survived simply because they were hard to find. They weren’t documented. Only a handful of engineers knew the endpoints. And if an attacker wanted to abuse them, they had to spend real time reverse‑engineering traffic and guessing how things worked. That “security b...
Exploiting Layer-Specific Vulnerabilities to Backdoor Attack in Federated Learning
Federated learning FL enables distributed model training across edge devices while preserving data locality. This decentralized approach has emerged as a promising solution for collaborative learning on sensitive user data, effectively addressing the longstanding privacy concerns inherent in...
EUVD-2021-10817
Malware in sbrugna...
EUVD-2021-2996
Malicious code in bioql PyPI...
EUVD-2021-32112
Malicious code in bioql PyPI...
ShadowLeak Exploit Exposed Gmail Data Through ChatGPT Agent
Radware researchers revealed a service-side flaw in OpenAI's ChatGPT. The ShadowLeak attack had used indirect prompt injection to bypass defences and leak sensitive data, but the issue has since been fixed...
Advancing Jailbreak Strategies: a Hybrid Approach to Exploiting LLM Vulnerabilities and Bypassing Modern Defenses
The advancement of Pre-Trained Language Models PTLMs and Large Language Models LLMs has led to their widespread adoption across diverse applications. Despite their success, these models remain vulnerable to attacks that exploit their inherent weaknesses to bypass safety measures. Two primary...
Context Manipulation Attacks : Web Agents Are Susceptible to Corrupted Memory
Autonomous web navigation agents, which translate natural language instructions into sequences of browser actions, are increasingly deployed for complex tasks across e-commerce, information retrieval, and content discovery. Due to the stateless nature of large language models LLMs, these agents...