33 matches found
Rubrics-as-an-Attack-Surface
Rubrics as an Attack Surface: Stealthy Preference Drift in LLM Judges 📊 Dataset • 🤖 Trained Models • 📝 Paper • 💻 Repo This repository contains code for the paper Rubrics as an Attack Surface: Stealthy Preference Drift in LLM Judges by Ruomeng Ding, Yifei Pang, He Sun, Yizhong Wang, Steven Wu, and...
redteam-ai-benchmark
Red Team AI Benchmark Russian version: README.ru.md Red Team AI Benchmark is a CLI model-evaluation benchmark. It measures how LLMs understand and respond to red-team questions and security scenarios; it is not a tool for carrying out those activities. Version 2 uses a rubric-based dataset instea...
CVE-2014-3551
CVE-2014-3551 Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafte...
Beyond the Hype: Evaluating LLM Integration and Practical Limitations in Security Operation Centers
Large Language Models LLMs are increasingly being explored within Security Operation Centers SOCs to support text-heavy analytical work such as alert contextualization, incident summarization, and drafting investigative artifacts. Despite this interest, practitioners describe critical operational...
On the Figures of Merit for Quantum Software Security: Toward a Benchmarking Rubric
Quantum software is increasingly provided through multi-tenant and cloud-based Quantum-as-a-Service QaaS stacks. A growing concern about the diverse attack vectors across the pipeline has been demonstrated in recent research. Yet the community has converged on three mature pillars: Scale Qubit...
redteam-ai-benchmark — Updated!
Red Team AI Benchmark Russian version: README.ru.md Red Team AI Benchmark is a CLI model-evaluation benchmark. It measures how LLMs understand and respond to red-team questions and security scenarios; it is not a tool for carrying out those activities. Version 2 uses a rubric-based dataset instea...
Decoys Cannot Go Everywhere: Mapping the Deception Surface in MITRE ATT&CK
Cyber deception research often assumes that a decoy can be placed wherever there is attacker behavior. This work tests that assumption across MITRE ATT&CK v18.1. We introduce a four-criterion rubric for infrastructure deception and apply it to all 250 ATT&CK techniques. The rubric evaluates wheth...
EUVD-2020-23985
Malware in sbrugna...
CVE-2020-36499
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting XSS vulnerability in the content parameter of the Rubric Block Add module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value...
Malicious code in d2l-rubric (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551223fd7a2d9e356d5db1df39fab3d2dfe82a4c86215c43bdfea16345cb42d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2307 Malicious code in d2l-rubric (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551223fd7a2d9e356d5db1df39fab3d2dfe82a4c86215c43bdfea16345cb42d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2308 Malicious code in d2l-rubric-polymer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffe4a4a3c695e3f39e87fbc9f464c883e8275ec033acd22a40cc3190a97d201a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Moodle multiple cross-site scripting (XSS) vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1...
GHSA-M8F5-9WG8-2C3H Moodle multiple cross-site scripting (XSS) vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1...
CVE-2020-36499
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting XSS vulnerability in the content parameter of the Rubric Block Add module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value...
CVE-2020-36499
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting XSS vulnerability in the content parameter of the Rubric Block Add module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value...
Cross site scripting
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting XSS vulnerability in the content parameter of the Rubric Block Add module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value...
CVE-2020-36499
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting XSS vulnerability in the content parameter of the Rubric Block Add module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value...
PT-2021-12068 · Unknown · Tao Open Source Assessment Platform
Name of the Vulnerable Software and Affected Versions: TAO Open Source Assessment Platform version 3.3.0 RC02 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value, exploiting a cross-site scripting XSS vulnerability in the...
Tao Open Source Assessment Platform 跨站脚本漏洞
Tao Open Source Assessment Platform is an open source assessment platform from Tao, Luxembourg. The TAO Open Source Assessment Platform suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability in the content parameter of the Rubric Block Add modul...