Atomicity for Agents: Exposing, Exploiting, and Mitigating TOCTOU Vulnerabilities in Browser-Use Agents

Browser-use agents are widely used for everyday tasks. They enable automated interaction with web pages through structured DOM based interfaces or vision language models operating on page screenshots. However, web pages often change between planning and execution, causing agents to execute action...

EUVD-2020-21261

Malware in sbrugna...

EUVD-2024-51186

Malicious code in bioql PyPI...

EUVD-2024-54192

Malicious code in bioql PyPI...

CVE-2018-4178

CVE-2018-4178 describes a permissions issue in macOS where the system incorrectly granted execute permission, stemming from a DesktopServices permission validation flaw. Affected are macOS High Sierra prior to 10.13.4. The root cause is an improper permission grant that could enable a local attac...