skill-scanner v2.0.13

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines pattern-based detection YAML + YARA, LLM-as-a-judge , and behavioral dataflow analysis to maximize detection coverage of probable threats while...

Sharp Network Scanner Tool insecure initial configuration

Overview Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation are Windows applications which work as FTP servers and accept scan outputs from MFPs. With the initial configuration, anyone can upload files unlimitedly without authentication. Initialization of a Resource...

CVE-2026-14192: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Stored XSS. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14202: Observable Response Discrepancy

Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Account Footprinting. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-64630: Incorrect Authorization

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...

CVE-2026-58074: Improper Control of Generation of Code

A vulnerability allowing a high-privileged user to execute arbitrary code on the server...

CVE-2026-14175: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-24083: Untrusted Pointer Dereference

Memory Corruption while processing IOCTL device driver requests with invalid arguments...

CVE-2026-24076: Buffer Copy without Checking Size of Input

Memory Corruption when processing registry values with incorrect types using a direct query method...

CVE-2026-15721: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-64633: Improper Control of Generation of Code

A vulnerability allowing remote unauthenticated code execution on the agent host...

CVE-2026-25288: Buffer Over-read

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...

CVE-2026-24079: Missing Authentication for Critical Function

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters...

CVE-2026-24078: Exposure of Private Personal Information to an Unauthorized Actor

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling...

CVE-2026-18650: Missing Authorization

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1...

CVE-2026-64631: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability allowing a low-privileged user to inject SQL and extract database contents...

CVE-2026-25289: Stack-based Buffer Overflow

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...

CVE-2026-47614: Server-Side Request Forgery (SSRF)

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-18806: External Control of File Name or Path

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0...

CVE-2026-24077: Integer Underflow (Wrap or Wraparound)

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...