259 matches found
Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation
Reusable skills are becoming a fundamental building block of Large Language Model LLM agents, enabling capabilities to be packaged, shared, and reused across diverse applications. However, existing security research primarily focuses on prompt injection and runtime execution, leaving security ris...
PT-2026-59584
Summary The execute command function in shell tools.py calls os.path.expandvars on every command argument at line 64, manually re-implementing shell-level environment variable expansion despite using shell=False line 88 for security. This allows exfiltration of secrets stored in environment...
CVE-2021-22670
An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...
CVE-2019-11984
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2024-2469
An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.17, 3.9.12, 3.10.9, 3.11.7 and 3.12.1. This vulnerability was reported...
EUVD-2015-1578
Malware in sbrugna...
EUVD-2004-1159
Malware in sbrugna...
EUVD-2006-2645
Malware in sbrugna...
EUVD-2019-17325
Malware in sbrugna...
EUVD-2021-23769
Malware in sbrugna...
EUVD-2005-1197
Malware in sbrugna...
EUVD-2011-4192
Malware in sbrugna...
EUVD-2021-18856
Malware in sbrugna...
EUVD-2012-3435
Malware in sbrugna...
EUVD-2020-30458
Malware in sbrugna...
EUVD-2018-9651
Malware in sbrugna...
EUVD-2015-3885
Malware in sbrugna...
EUVD-2006-1767
Malware in sbrugna...