CVE-2026-67547

taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.23, the POST /api/skill-exec/skillid/call endpoint in taOS executes built-in skills — including the codeexec skill which runs arbitrary Python via subprocess.run"python3", "-c", code — without performing any admin role check, skill...

CVE-2026-67548

taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.25, tinyagentos taOS registers all system settings routes under a single APIRouter instance created with no admin authorization dependency. Any authenticated user—including non-admin invited users whose isadmin flag is explicitly...

See my how-to the Apache fuzzing and dig to a value of 1500 knife of vulnerability-vulnerability warning-the black bar safety net

Target In the AFL in the view of the Apache httpd server's crash logs, I found a lot of problems. For example, some crash testing with example in fuzz testing tools internal collapse, but also affect the test program stability. In this article, I will talk to you to explain the test case to crash...

Phenoelit ADvisory 0815 ++ ** Ascend

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +--- Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/LucentAscend.txt Affected Products Lucent Pipline, MAX, DSL-Terminator. Formerly known under Ascend Router...