CamoDocs

CamoDocs EMNLP 2026 論文 CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents の公式リポジトリです。 CamoDocs は、クエリ包含を必要としない、検索拡張生成（RAG）に対する知識データベースへのポイズニング攻撃です。各敵対的サブ文書は、最適化された良性サブ文書と連結することでカモフラージュされ、その結果得られるポイズニング文書は、フィルタリング防御が依存するクエリ重複の痕跡を回避します。 CamoDocs...

Awesome-RCE-techniques

Awesome RCEテクニック さまざまなアプリでリモートコード実行（RCE）を達成するためのテクニックのAwesomeリスト！ このプロジェクトの目的 このプロジェクトの目的は、さまざまなアプリケーションでリモートコード実行（RCE）を達成するためのすべてのテクニックをまとめたオープンソースの知識データベースを提供することです。これらのテクニックにはすべて、トレーニング用のテスト環境（通常はDockerイメージ）も付属しています。 テクニック Content-Management-Systems-CMS/ Drupal : 3つのテクニック/Drupal/ FuelCMS :...

Cybersecurity-Handbook

📚 Cybersecurity Handbook An open-source cybersecurity knowledge base for students, professionals, and self-learners — built as structured notes, hands-on labs, and real-world concepts you can search and navigate visually. Built with Quartz • Powered by Markdown • Community Driven • MIT Licensed...

appsec-forge

appsec-forge 開発者、DevOps、AppSec、DevSecOps、セキュリティエンジニア 向けに作成されました。 セキュアな開発、アプリケーションセキュリティ、インフラストラクチャ、ソフトウェアサプライチェーン、AI、DevSecOpsをカバーする、リポジトリファーストのセキュリティ知識ベースです。 経験豊富なエンジニアリングチームと同じ方法でセキュリティ問題を学習しましょう。機能を理解し、根本原因を特定し、エクスプロイトを分析し、修正策を比較し、それを支えるセキュリティエンジニアリングプラクティスを探求します。 目次 1. 始める前に 概要 現在利用可能なケース...

CVE-2026-54504

MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with STARTWEBUI enabled by default and WEBPORT set to 3080...

EUVD-2026-82392

MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with STARTWEBUI enabled by default and WEBPORT set to 3080...

EUVD-2026-75177

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends...

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...

EUVD-2026-75183

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion...

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Summary External knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for othe...

CVE-2026-87998

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...

CVE-2026-87998 Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...

CVE-2026-87998 Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...

CVE-2026-87998

Open WebUI (versions 0.10.0 through 0.11.1 ) contains an authorization flaw in the knowledge base deletion endpoint (DELETE /api/v1/knowledge/{id}/delete in backend/open_webui/routers/knowledge.py). The endpoint validates permissions against the knowledge base itself but then removes the associat...

CVE-2026-87998 Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...

CVE-2026-87017

Open WebUI , a self-hosted AI platform, contains an information disclosure flaw in its built-in knowledge search tool . From version 0.7.0 through 0.11.1 , the tool passed the caller's readable knowledge identifiers through a metadata filter, but the search methods in eleven shipped vector backen...

CVE-2026-87017 Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built-in knowledge search tool passed the caller's readable knowledge identifiers through a metadata filter, but the search methods in eleven shipped vector backends ignored that...

CVE-2026-87998: Improper Privilege Management

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...

Kibana 8.19.11 < 8.19.21 / 9.3.x < 9.4.6 / 9.5.x < 9.5.2 Incorrect Authorization (ESA-2026-142)

The version of Kibana installed on the remote host is 8.19.11 prior to 8.19.21, or 9.3.x prior to 9.4.6, or 9.5.x prior to 9.5.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-142 advisory. - Incorrect Authorization CWE-863 in Kibana can lead to unauthorized...

PT-2026-89175

Summary External knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for othe...