5054 matches found
EUVD-2026-52406
Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server awslabs.amazon-mq-mcp-server before 2.0.24 may allow a remote unauthenticated actor via prompt injection to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent t...
CVE-2026-18655
Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server awslabs.amazon-mq-mcp-server before 2.0.24 may allow a remote unauthenticated actor via prompt injection to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent t...
CVE-2026-18718
Ghidra contains an ARBITRARY CODE EXECUTION vulnerability in the Swift demangler analyzer. By supplying a malicious Ghidra project with a crafted Swift tool directory path, an attacker can cause SwiftDemanglerAnalyzer to restore a persisted Swift binary directory from project state and trigger Sw...
Exploit for Improper Output Neutralization for Logs in Neo4J
CVE-2026-1337 – AI Coding Assistant Prompt Injection to RCE !...
PT-2026-67502
Name of the Vulnerable Software and Affected Versions Amazon Strands Agents Tools versions prior to 0.8.0 Description A prompt injection issue in the shell tool allows remote actors to execute arbitrary operating system commands on the agent host. This is achieved by using a crafted prompt that...
CVE-2026-18655: Improper Restriction of Communication Channel to Intended Endpoints
Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server awslabs.amazon-mq-mcp-server before 2.0.24 may allow a remote unauthenticated actor via prompt injection to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent t...
CVE-2026-18733: Undefined Security Weakness
A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the noninteractive parameter to true, bypassing the human consent gate. To...
PT-2026-67485
Name of the Vulnerable Software and Affected Versions Amazon MQ MCP Server awslabs.amazon-mq-mcp-server versions prior to 2.0.24 Description Improper restriction of intended endpoints in the RabbitMQ broker connection tools may allow a remote unauthenticated actor to obtain Amazon MQ for RabbitMQ...
SecureAI-Scan v0.7.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
CVE-2026-49042 — Updated!
CVE-2026-49042 — camel-langchain4j-tools Prompt-Injection → Header-Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/|...
CVE-2026-68771
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...
Anthropic’s Opus 5 Is Better at Resisting Prompt Injection
The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 5.9% at k=15 and Mythos 5 2.6%, making it the most robust model...
Exploit for CVE-2026-17351
CVE-2026-17351 — pgAdmin 4 AI Assistant Read-Only Bypass via L...
CVE-2026-17351
The CVE-2026-17351 issue affects pgAdmin 4 (versions from 9.13 up to, but not including, 9.17). The vulnerability stems from a mismatch between sqlparse’s string-literal handling and PostgreSQL’s parser, which can allow an LLM-supplied query executed inside a BEGIN TRANSACTION READ ONLY wrapper t...
CVE-2026-56673 ComfyUI: Path traversal in LoadImage via the /prompt API allows arbitrary file existence probing and image exfiltration
ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folderpaths.getannotatedfilepath and existsannotatedfilepath join workflow-controlled annotated filenames to a base directory without a containment check, allowing an unauthenticated craft...
CVE-2026-56673
ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folderpaths.getannotatedfilepath and existsannotatedfilepath join workflow-controlled annotated filenames to a base directory without a containment check, allowing an unauthenticated craft...
CVE-2026-56673 ComfyUI: Path traversal in LoadImage via the /prompt API allows arbitrary file existence probing and image exfiltration
ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folderpaths.getannotatedfilepath and existsannotatedfilepath join workflow-controlled annotated filenames to a base directory without a containment check, allowing an unauthenticated craft...
CVE-2026-56673 ComfyUI: Path traversal in LoadImage via the /prompt API allows arbitrary file existence probing and image exfiltration
ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folderpaths.getannotatedfilepath and existsannotatedfilepath join workflow-controlled annotated filenames to a base directory without a containment check, allowing an unauthenticated craft...
CVE-2026-56673
ComfyUI (multiple nodes: LoadImage, LoadImageMask, LoadImageOutput, LoadAudio, LoadLatent, LoadVideo, Load3D) suffers a path traversal in pre-0.28.0 builds where folder_paths.get_annotated_filepath and exists_annotated_filepath join workflow-controlled annotated filenames to a base directory with...
