540 matches found
sagex3-cve-2020-7388-poc
sagex3-cve-2020-7388-poc 针对 CVE-2020-7388 的概念验证利用代码，实现 Sage X3 的 AdxDSrv 服务上以 SYSTEM 权限进行的未认证远程代码执行 概述 Sage X3 在 "AdxDSrv.exe" 进程（AdxAdmin 组件的一部分）上暴露了一个管理服务，默认监听 TCP 1818 端口（可更改）。该服务用于通过 Sage X3 控制台对 Sage ERP 解决方案进行远程管理。服务中的一个漏洞允许恶意攻击者向该暴露的服务发送精心构造的请求，以 "NT AUTHORITY/SYSTEM" 用户身份在服务器上执行命令。...
aether
Aether v6.0 — Marco de análisis de seguridad de contratos inteligentes Versión 6.0 | Novedades en v6.0 | Registro de cambios Aether es un marco basado en Python para analizar contratos inteligentes Solidity, generar hallazgos de vulnerabilidades, producir pruebas de concepto PoC basadas en Foundr...
sage
Sage AI智能体安全 — AI编码助手的代理检测与响应 Sage 是一个轻量级安全层，用于保护 AI 代理免于执行危险操作。它拦截工具调用（shell 命令、URL 获取、文件写入），并在执行前通过多层威胁检测进行检查。 注意： Sage 可能以不同的产品名称出现（例如 Norton Sage、Avast Sage），具体取决于安装方式。详见品牌。 主要特性 URL 信誉 — 基于云端的恶意软件、钓鱼和诈骗 URL 检测 本地启发式规则 — 300+ 个基于 YAML 的威胁模式，用于检测危险命令、可疑 URL、凭证泄露和混淆行为 提示注入检测 —...
SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples
As machine learning increasingly relies on public, untrusted data sources, data poisoning attacks, which inject malicious examples into training data to induce misclassification of a chosen target, pose a growing threat. Existing defenses either assume zero ground-truth information about which...
sage v0.13.0
Sage Safety for Agents — Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layer...
CVE-2026-67403
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-68484
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
CVE-2026-67403
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-67403
Cash Collect (Sage) has an improper authorization vulnerability in the Sage AR Automation API . Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non-predictable tenant identifier. The CVSS ...
EUVD-2026-75060
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-68484
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
CVE-2026-67403
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-68484
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
EUVD-2026-75061
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
CVE-2026-68484
Cash Collect by Sage contains an improper authorization vulnerability in the Sage AR Automation API . Administrative functions fail to properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and escalate to elevated privileges. The issue is ra...
CVE-2026-68484: Missing Authorization
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
PT-2026-89080
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
PT-2026-89079
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-67403: Authorization Bypass Through User-Controlled Key
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-67395
A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...