Rasa-cve-exp

Rasa-cve-exp CVE-2021-42556 server-1.py Just run it directly python server-1.py Arbitrary File Upload PUT /model "modelserver":"url":"http://192.168.244.128:5000/stage1","waittimebetweenpulls":0 Effect as follows: CVE-2021-41127 server-1.py Default model name: evilimportmodel.tar.gz Malicious mod...

CVE-2026-94485

A flaw was found in Next.js. During local development, the development server exposes a Model Context Protocol MCP endpoint without properly restricting cross-site requests. If a developer visits a malicious website while running the development server, an attacker can issue unauthorized requests...

CVE-2026-94486

A flaw was found in Next.js. The local development server exposes a Model Context Protocol MCP endpoint without properly restricting cross-site requests. If a developer running the development server visits a malicious website, an attacker can issue unauthorized requests to this endpoint, leading...

CVE-2026-5843

CVE-2026-5843 PoC Minimal OCI registry that serves a malicious model to exploit the modelfile importlib execution path in mlx-lm. When Docker Model Runner loads the model for inference, model.py executes on the host as the logged-in user. Requires: Docker Desktop ≤ 4.70.x Apple Silicon with Model...

CVE-2026-94485

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-67989

crmne/rubyllm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in Mistral model capability matching on Ruby 3.1.x...

CVE-2026-94486

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-104908

MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclusively to the importing user's organisation, with the default flag forced to off. However, the application stripped...

EUVD-2026-91745

MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclusively to the importing user's organisation, with the default flag forced to off. However, the application stripped...

CVE-2026-104908 MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging

MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclusively to the importing user's organisation, with the default flag forced to off. However, the application stripped...

CVE-2026-104908

MISP versions prior to 2.5.48 are vulnerable to an improper input validation vulnerability in the decaying model import functionality. The application fails to adequately sanitize nested model keys during the import process, as it only strips top-level id and uuid fields while pinning org_id and ...

CVE-2026-104908 MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging

MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclusively to the importing user's organisation, with the default flag forced to off. However, the application stripped...

CVE-2026-94485

The Next.js framework (versions 16.0.0 through 16.3.8 ) contains a vulnerability in the next dev development server. The server exposes a Model Context Protocol (MCP) endpoint that lacks reliable restrictions on cross-site requests . If a developer visits a malicious website while the development...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486

The Next.js React framework contains a vulnerability in the next dev development server, specifically affecting versions 16.0.0 through 16.3.8 . The server exposes a Model Context Protocol (MCP) endpoint that fails to reliably restrict cross-site requests. This flaw allows an attacker to issue un...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

aegis-audio-defense

AEGIS: Audio Endogenous Guarding via Internal Signals Against Large Audio-Language Model Jailbreaks Submitted to ICASSP 2027. AEGIS keeps the target audio-language model frozen and adds a mid-layer risk gate that conditionally drives late-layer safety adapters, with closed-loop scaling at...

MEA-Bench

MEA-Bench: Бенчмарк для атак извлечения моделей Этот репозиторий предоставляет унифицированный бенчмарк для атак извлечения моделей, защит, адаптивных атак и оценки. Публичный интерфейс организован вокруг небольшого числа переносимых команд. Специфичные для методов Python-модули и устаревшие...

zombieguard

ZombieGuard A defensive scanner for structural metadata evasion in ZIP archives. ZombieGuard detects contradictions between ZIP local file headers, central directory records, and payload characteristics. These contradictions can be used to make archive contents appear empty or harmless to one...