CVE-2026-25130-Cybersecurity-AI-CAI-Framework-0.5.10

CVE-2026-25130 – Cybersecurity AI CAI フレームワーク 引数インジェクション / OSコマンドインジェクション PoC 著者: Mohammed Idrees Banyamer 国: ヨルダン GitHub: https://github.com/yourusername Instagram: @banyamersecurity 概要 このリポジトリには、Cybersecurity AI CAI フレームワークにおけるOSコマンドインジェクションにつながる引数インジェクションの脆弱性を実証する Proof of Concept PoC が含まれています...

CVE-2026-25130

CVE-2026-25130 affects the Cybersecurity AI (CAI) framework up to version 0.5.10. The vulnerability is in the find_file() tool (src/cai/tools/reconnaissance/filesystem.py): user-controlled input is concatenated into a shell command using a plain f-string and run via shell=True, enabling argument ...

CVE-2026-25130: Improper Neutralization of Special Elements used in an OS Command

Cybersecurity AI CAI is a framework for AI Security. In versions up to and including 0.5.10, the CAI Cybersecurity AI framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subprocess.Popen with...

Directory Traversal

Overview salt is a new approach to infrastructure management built on a dynamic communication bus. Salt can be used for data-driven orchestration, remote execution for any infrastructure, configuration management for any app stack, and much more. Affected versions of this package are vulnerable t...

CVE-2025-22240: Improper Limitation of a Pathname to a Restricted Directory

Arbitrary directory creation or file deletion. In the findfile method of the GitFS class, a path is created using os.path.join using unvalidated input from the “tgtenv” variable. This can be exploited by an attacker to delete any file on the Master's process has permissions to...

aspell/aspell_fuzzer: Heap-buffer-overflow in acommon::find_file

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5693958272843776 Project: aspell Fuzzer: aflaspellfuzzer Fuzz target binary: aspellfuzzer Job Type: aflasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...