20 matches found
DeepGuard
DeepGuard 📖 プロジェクト概要 DeepGuardは、多層セマンティック集約技術を用いて、大規模言語モデルの安全なコード生成能力を強化する革新的なアプローチです。この手法は、コード内のセキュリティ脆弱性を効果的に特定・緩和し、開発者により安全なコード生成ソリューションを提供します。 🔑 中核となる技術的特徴 Multi-Layer Semantic Aggregation（多層セマンティック集約） ：複数のTransformer層からの隠れ状態を集約することで、豊富なセマンティック情報を取得します Security-Aware LoRA（セキュリティ対応LoRA）...
CVE-2026-48516 MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings
MessagePack for C is a MessagePack serializer for C. Prior to 2.5.301 and 3.1.7, InterfaceLookupFormatter constructs an internal Dictionary with the default equality comparer instead of the security-aware comparer supplied by options.Security.GetEqualityComparer. This formatter omission allows...
PT-2026-51400
Name of the Vulnerable Software and Affected Versions MessagePack for C versions prior to 2.5.301 MessagePack for C versions prior to 3.1.7 Description The InterfaceLookupFormatter constructs an internal Dictionary using the default equality comparer instead of the security-aware comparer provide...
Optimizing Agent Planning for Security and Autonomy
Indirect prompt injection attacks threaten AI agents that execute consequential actions, motivating deterministic system-level defenses. Such defenses can provably block unsafe actions by enforcing confidentiality and integrity policies, but currently appear costly: they reduce task completion...
injection-research
injection-research A study comparing injection vulnerabilities...
Resilient Distribution Network Planning against Dynamic Malicious Power Injection Attacks
Active distribution networks facilitating bidirectional power exchange with renewable energy resources are susceptible to cyberattacks due to integration of a diverse array of cyber components. This study introduces a grid-level defense strategy aimed at enhancing attack resiliency based on...
CVE-2024-45797
LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5....
CVE-2024-45797 LibHTP's unbounded header handling leads to denial service
LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5....
CVE-2024-28871
LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available...
CVE-2024-28871 Excessive CPU used on malformed traffic
LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available...
CVE-2024-28871 Excessive CPU used on malformed traffic
LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available...
CVE-2024-23837
LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46...
verifySignatureWithKey - RRSIG RR's Signer's Name is never checked if it matches owner name
Lines of code Vulnerability details Impact According to RFC 4035 and as mentioned in the comments in function "verifySignatureWithKey" , the Signer's name should also be checked if it matches the owner name. If the Signer's Name field of an RRSIG record does not match the owner name of a DNSKEY...
[SECURITY] Fedora 21 Update: libhtp-0.5.16-1.fc21
LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. The goals of the project, in the order of importance, are as follows: 1. Completeness of coverage; 2. Permissive parsing; 3. Awareness of evasion techniques; 4. Performance;...
OpenICS ICS Protocol Decoder Builds Data Dictionaries
Industrial control system security has been called archaic, laughable and even non-existent. Most ICS and SCADA systems weren’t built with the Internet in mind, much less security, but yet they are at the forefront of manufacturing, building automation and critical infrastructure operations...
ZetaBoards Cross Site Scripting
Exploit Title: ZetaBoards Cross Site Scripting Date: 6.03.2012 Author: Sony Software Link: http://www.zetaboards.com/ Google Dorks: intext:Hosted for free by ZetaBoards Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...
Wiki Spot Cross Site Scripting
Exploit Title: Wiki Spot Cross Site Scripting Date: 18.02.2012 Author: Sony Software Link: http://wikispot.org/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wiki-spot-cross-site-scripting.html...
AtWiki Cross Site Scripting
Exploit Title: @Wiki Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://atwiki.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wiki-cross-site-scripting.html...
SeedWiki Cross Site Scripting
Exploit Title: SeedWiki Cross Site Scripting Date: 8.02.2012 Author: Sony Software Link: http://www.seedwiki.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/seedwiki-cross-site-scripting.html...
BtiTracker 1.3.x / 1.4.x SQL Injection
!/usr/bin/env python xpl0it /\ \ /\ \ /\ \ //\ / \ ,\L\ /\ \ ,\ \ \ \ /' /\ \ /'\ /'/\ /\ /'/\ \ \ / /\ /\ \ \ /\ /\ /\ \L\ /\ //\ /\ \ \ \ \ / \ \ \ \ \ \ \ \ /\ \ \ \ \ \\ /\ \ \ \ \/ \ //////////// // // //// // \ // www.insecurity.ro // BtiTracker...