Intelligence View
⚡ tsecurity.de Intelligence
PraisonAI CodeAgent < = 1.6.77 Remote Code Execution (RCE) via Unsandboxed LLM Code Execution
Topic: PraisonAI CodeAgent < = 1.6.77 Remote Code Execution (RCE) via Unsandboxed LLM Code Execution Risk: High Text:#!/usr/bin/env python3 # Exploit Title:…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Topic: PraisonAI CodeAgent < = 1.6.77 Remote Code Execution (RCE) via Unsandboxed LLM Code Execution Risk: High Text:#!/usr/bin/env python3 # Exploit Title: PraisonAI CodeAgent < = 1.6.77 Remote Code Execution (RCE) via Unsandboxed LLM ...
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
18 sources
CVE-2026-111906 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha Elasticsearch/OpenSearch Administration API cross-site request forgery (EUVD-2026-103314)
17 more sources
VVulDB Updates3 hours agoCVE-2026-111905 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha {userId} userId resource injection (EUVD-2026-103315) VVulDB Updates3 hours agoCVE-2026-111904 | thorsten phpMyFAQ 4.2.0-alpha Open Question Controller /api/v4.0/open-questions OpenQuestionController information disclosure (EUVD-2026-103316) VVulDB Updates3 hours agoCVE-2026-111903 | thorsten phpMyFAQ 4.2.0-alpha SvgSanitizer cross site scripting (EUVD-2026-103317) VVulDB Updates3 hours agoCVE-2026-111894 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha cleanUpContent cross site scripting (EUVD-2026-103325) VVulDB Updates3 hours agoCVE-2026-111892 | thorsten phpMyFAQ up to 4.2.0-alpha.2 Rate Limiting allocation of resources (EUVD-2026-103327) VVulDB Updates5 hours agoCVE-2026-111907 | thorsten phpMyFAQ up to 4.1.8 update-database cross-site request forgery (EUVD-2026-103313)
+11
10 sources
CVE-2026-98418 | Linux Kernel up to 7.2.7/7.3-rc3 sched/core kernel/sched/core.c set_task_cpu locking (Nessus ID 366864)
9 more sources
VVulDB Updates4 hours agoCVE-2026-98396 | Linux Kernel up to 7.2.6/7.3-rc2 powerpc kup.h arch_exit_to_user_mode_prepare race condition (Nessus ID 366869) VVulDB Updates10 hours agoCVE-2026-63902 | Linux Kernel up to 7.0.11 Cypress M8 cypress_m8.c cypress_read_int_callback out-of-bounds (Nessus ID 366749) VVulDB Updates10 hours agoCVE-2026-63903 | Linux Kernel up to 7.0.11 Belkin Sa Serial Driver belkin_sa.c belkin_sa_read_int_callback out-of-bounds (Nessus ID 366749) VVulDB Updates10 hours agoCVE-2026-63904 | Linux Kernel up to 7.0.11 Usbtmc actual_length out-of-bounds (Nessus ID 366749) VVulDB Updates10 hours agoCVE-2026-63942 | Linux Kernel up to 7.0.11 Parport parport_pc.c device_add race condition (Nessus ID 366749) VVulDB Updates10 hours agoCVE-2026-63957 | Linux Kernel up to 7.0.11 Safe Serial memory corruption (Nessus ID 366749)
+3
7 sources
CVE-2026-92528 | GitLab up to 19.2.7/19.3.4/19.4.1 privileges management (Nessus ID 366866)
6 more sources
VVulDB Updates2 hours agoCVE-2026-101168 | GitLab up to 19.2.7/19.3.4/19.4.1 Pages information disclosure (Nessus ID 366862 / WID-SEC-2026-3858) VVulDB Updates4 hours agoCVE-2026-96893 | GitLab up to 19.2.7/19.3.4/19.4.1 AI Conversation Context Construction neutralization (Nessus ID 366872) VVulDB Updates3 hours agoCVE-2026-111893 | Thorsten phpMyFAQ 4.2.0-alpha GroupController category-restrictions saveCategoryRestrictions categoryIds privileges management (EUVD-2026-103326) VVulDB Updates3 hours agoCVE-2026-111891 | thorsten phpMyFAQ up to 4.2.0-alpha.2 Group Permission API updatePermissions privileges management (EUVD-2026-103328) VVulDB Updates3 hours agoCVE-2026-111890 | Thorsten phpMyFAQ up to 4.2.0-alpha.2 UserController updateUserRights privileges management (EUVD-2026-103329) VVulDB Updates9 hours agoCVE-2026-111921 | go-vikunja Vikunja up to 2.6.x Link Shares privileges management (EUVD-2026-103289)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/3693397/proof-of-concept-poc/praisonai-codeagent-1677-remote-code-execution-rce-via-unsandboxed-llm-code-execution/