CollaRE

CollaRE v1.4 はじめに CollaRE は、共同リバースエンジニアリングのためのツールで、プロジェクト中に複数のツールを使う必要があるチームが、別の場所でファイルを共有しなくてもコラボレーションできるようにすることを目的としています。また、非常にシンプルなユーザー管理機能も含まれており、異なるチームが異なるプロジェクトで作業するマルチプロジェクトサーバーとしても使用できます。 このツールのバックエンドは、Docker で動作する nginx を前面に配置したシンプルな Flask app で、関連データを保持するファイルと JSON...

GHSA-2XGM-WC4G-5JVG n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

Impact An authenticated user with permission to create workflows in one project could bypass project/folder authorization boundaries during workflow creation. By supplying a crafted request payload, the user could associate a newly created workflow with a folder belonging to a different project...

n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

Impact An authenticated user with permission to create workflows in one project could bypass project/folder authorization boundaries during workflow creation. By supplying a crafted request payload, the user could associate a newly created workflow with a folder belonging to a different project...

Trusted Credentials, Untrusted Behavior: Benchmarking LLM-Agent Security in High-Performance Computing

Large language model LLM agents are starting to take on routine work in high-performance computing HPC, including monitoring Slurm jobs, diagnosing failed builds, inspecting simulation output, and coordinating scientific workflows. To do this work, an agent commonly acts under its user's...

CVE-2022-23921

Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and t...

GE Proficy CIMPLICITY-IPM 安全漏洞

GE Proficy CIMPLICITY-IPM is GE's for local and cloud storage and analytics. GE Proficy CIMPLICITY-IPM has a security vulnerability, the exploitation of which could lead to local elevation of privilege and code execution.GE maintains that it is only possible for an attacker to log in to access a...