TRACE

TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking Official implementation for TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking. 📖 Overview Large language model LLM agents can autonomously plan, invoke tools, interact with environments, and execute long-horizon workflows...

CVE-2026-78329

CVE-2026-78329 — camel-undertow header filter strategy not applied websocket. injection Runnable proof-of-concept reproducer for the Apache Camel vulnerability where UndertowEndpoint defaulted its headerFilterStrategy to the base HttpHeaderFilterStrategy and pushed that instance into the...

cloudflare-bypass-2026

Cloudflare Bypass Tool 2026 A multi-strategy toolkit for researching and testing Cloudflare Turnstile / Challenge flows on macOS, Windows, and Linux. 面向 Cloudflare Turnstile / Challenge 的多方案研究与授权测试工具集，支持 Mac / Windows / Linux 。 Table of Contents / 目录 English| 中文 ---|--- Disclaimer| 免责声明 Overview|...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

GadgetProbe

Description You just found a Java deserialization bug, you ran all your ysoserial payloads, and.... you got nothing. What now? How can you debug or build a gadget chain if you're totally blind? Introducing GadgetProbe, a tool that shines a light on remote classpaths and raises bug severity for al...

cve-2020-1764-poc

CVE-2020-1764 PoC Auth bypass PoC for Kiali 0.4.0 to 1.15.0 using login auth strategy Security Bulletin check version: curl 'http:///api check auth strategy: curl 'http:///api/auth/info' go run ./poc.go curl 'http:///api/status' -H "Authorization: Bearer $JWT"...

Open Enrollment Is Where Digital Strategy Gets Tested. Are You Ready?

Open enrollment puts payer infrastructure, security, APIs, and member experiences under pressure. Learn six ways that health plans can prepare from edge to core...

GHSA-97RH-RHH2-7VJV Payload: Remote Code Execution through first-register

Impact A crafted request to the public first-register operation can be used to perform a RCE exploit. You are affected if: - You use local auth strategy and your application remains without an initial user created Patches In the patched version data submission to create first user is properly...

Internet and Enterprise Strategy Revisited: From Digital Connectivity to AI-Enabled Enterprises, 1996 - 2026

This paper revisits the 1996 article Internet and Enterprise Strategy and assesses how its propositions were confirmed, transformed, or contradicted as digital connectivity evolved into an AI-enabled enterprise environment by 2026. The reassessment combines historical interpretation with a...

PT-2026-97049

Name of the Vulnerable Software and Affected Versions Unleash versions prior to 8.0.3 Description An authorization bypass exists in the feature management platform where the system fails to verify if strategy IDs provided in a request body belong to the project, feature, and environment specified...

CVE-2026-77425: Authorization Bypass Through User-Controlled Key

Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:projectId/features/:featureName/environments/:environment/strategies/set-sort-order passes attacker-controlled strategy IDs to unprotectedUpdateStrategiesSortOrder and updateSortOrder without verifyin...

CVE-2026-14296 nRF54H20: MCUBoot can be tricked to executing unauthenticated code

When using the Direct XIP update strategy, the main application image starts other cores i.e. radio core, based on the currently active slot without additional verification. The MCUboot in the bare upstream configuration assumes that if there is at least a single slot for each image available, th...

SOC-Log-Monitoring-Threat-Detection-System

🛡️ SOC Log Monitoring & Threat Detection System !Javahttp...

CVE-2026-85012 OS command injection in the Amazon CodeCatalyst blueprints SDK

Improper neutralization of special elements used in an OS command CWE-78 in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 might allow a user with permission to commit to a repository in the project to execute arbitrary commands in the blueprint...

SIR: Self-Improving Red-Teaming for Compute Use Agents

Computer use agents CUAs are vision-language models that perceive a screen and act on a real operating system through mouse, keyboard, and terminal, and they are increasingly deployed to automate everyday digital tasks. Because they can be exposed to untrusted content while operating, they are...

Zero-Day Dominance: How Akamai Defends Before the Industry Discloses

...

llm-strategy (>=2.1.0, <=2.2.0), llmtracer (>=1.1.0, <=1.2.1) +4 more potentially affected by CVE-2026-54553 via starlette-admin (>=0.9.0, <=0.14.1)

starlette-admin PYPI version =0.9.0, =2.1.0, =1.1.0, =0.0.3, =0.3.7a1, =0.1.0, =0.1.2, =0.1.10 Source cves: CVE-2026-54553 Source advisory: OSV:GHSA-6753-GR46-6WPR...

llm-strategy (>=2.1.0, <=2.2.0), llmtracer (>=1.1.0, <=1.2.1) +4 more potentially affected by CVE-2026-54553 via starlette-admin (>=0.9.0, <=0.14.1)

starlette-admin PYPI version =0.9.0, =2.1.0, =1.1.0, =0.0.3, =0.3.7a1, =0.1.0, =0.1.2, =0.1.10 Source cves: CVE-2026-54553 Source advisory: MEND:CVE-2026-54553...

GHSA-V7H8-XHH6-GFJ4 Apache Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes

Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and pushed...