oasis

OASIS Offensive AI Security Intelligence Standard — Open-source AI security benchmarking. Benchmark how AI models perform offensive security tasks — vulnerability discovery, exploitation, privilege escalation, and more. Full analysis with MITRE ATT&CK mapping, behavioral scoring, and detailed...

ws4-secure-design-agentic-systems

CoSAI Workstream 4: Secure Design Patterns for Agentic Systems This repository is for the work of the CoSAI Workstream 4, Secure Design Patterns for Agentic Systems. CoSAI is an OASIS Open Project and an open ecosystem of AI and security experts from industry leading organizations dedicated to...

Pribado

🔐 Pribado Private API Key Management & Zero-Knowledge Infrastructure Pribado is a self-hostable, zero-knowledge platform for managing API keys, encrypted secrets, and private communications. Built on Oasis Sapphire for hardware-backed confidential computing. ✨ Features 🔑 Private API Proxy Store A...

CVE-2026-107041

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

CVE-2026-107041

The Oasis Feng Island application (version 51801) is vulnerable to a Denial of Service (DoS) due to insecure permissions in the FeatureActionActivity component. This security flaw, categorized under CWE-926 (Improper Export of Android Application Components), allows unauthorized attackers to arbi...

PT-2026-132310

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

CVE-2026-107041

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

CVE-2026-107041

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

CVE-2026-107041

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

CVE-2026-107041: n/a: Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized…

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

EUVD-2026-113165

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

autotrain-advanced (>=0.7.114, <=0.7.127), camel-oasis (>=0.0.1, <=0.2.5) +8 more potentially affected by CVE-2026-68770 via sentence-transformers (3.0.0)

sentence-transformers PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - autotrain-advanced =0.7.114, =0.0.1, =1.0.1, =0.0.1, =0.1.0, =1.1.0, =0.0.5, =0.0.8 Source cves: CVE-2026-68770 Source...

CCR: Towards a Common, Quality-Gated CACAO Integrations Registry for European Cybersecurity Automation

Standardised, machine-readable cybersecurity playbooks provide a basis for portable, shareable, and reusable incident-response logic. OASIS CACAO provides a vendor-neutral representation for such playbooks, but not the product-specific integration artefacts needed to invoke external products and...

The like Trap: Multi-Stage Poisoning against Agents in Similarity-Based Recommendation Systems

With recent advancements in large language models LLMs and LLM-based agents, these agents are becoming increasingly autonomous and gaining broader access to act on users' behalf on the internet. However, the vulnerability of automated agents deployed on social media platforms e.g., for managing a...

ClawJacked Vulnerability in OpenClaw Could Let Websites Hijack AI Agents

Is your AI assistant safe? Oasis Security researchers have found a critical ClawJacked vulnerability in OpenClaw that allows hackers to hijack AI agents through a simple browser tab...

EUVD-2026-4525

Malicious code in oasis-os-provider-messaging npm...

MAL-2026-481 Malicious code in oasis-os-provider-messaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca1eb9a5a42a34b2db68e6d23c9c2cd2cbe7098f742e647c9c6867b342e95ab The package oasis-os-provider-messaging was found to contain malicious code...

Malicious code in oasis-os-provider-messaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca1eb9a5a42a34b2db68e6d23c9c2cd2cbe7098f742e647c9c6867b342e95ab The package oasis-os-provider-messaging was found to contain malicious code...

aiomisc-pytest (1.2.1), bayesnestor (0.1.8) +23 more potentially affected by CVE-2025-71176 via pytest (8.2.0)

pytest PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - aiomisc-pytest 1.2.1 - bayesnestor 0.1.8 - camel-oasis =0.0.1, =0.1.21, =2.0.0.1, =4.3.0, =0.1.0, =0.1.0, =0.9.0b13, =0.2.0, =0.1.0, =0.3.3 and more...

Lvzhou CMS security vulnerability

Lvzhou CMS Oasis CMS is a content management system by wanliofficial individual developer. A security vulnerability exists in Lvzhou CMS Oasis CMS, which stems from the unfiltered direct splicing of SQL queries in the title parameter of the ContentService, which may lead to SQL injection attacks...