claude-skill-antivirus fails to analyze executable files when scanning local skill directories,...
CVE-2026-84810
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md wh
#cwe-693
共收录 445 条相关情报。
← 返回所有主题Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from...
CVE-2026-84809
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pyca
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories,...
CVE-2026-84811
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...
CVE-2026-20277
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious __pycache_...
CVE-2026-84811
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts...
CVE-2026-84810
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md wh
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__ directories and .pyc/.pyo/.pyd extensions into skip...
CVE-2026-84809
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pyca
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security revie...
CVE-2026-20277
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode
CVE-2026-84811
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to
claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan
CVE-2026-84810
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md wh
Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
CVE-2026-84809
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pyca
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass acces...
CVE-2026-79686
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges cou
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass acces...
CVE-2026-79684
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges cou
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attack...
CVE-2026-79683
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges cou
oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.2 through version 1.18.0, oasdiff did not enforce --allow...
CVE-2026-53508
oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.
oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)
CVE-2026-53508
oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.
@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress v...
CVE-2026-82855
@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-
@hulumi/policies before 1.3.2 Evidence Validation Bypass
CVE-2026-82855
@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...
CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute den...
CVE-2026-82474
CVE-2026-82474 影响 Sudo 1.9.17p2 及之前版本。该漏洞存在于 sudo 基于 ptrace 的拦截模式中，具体表现为对 execveat 系统调用未正确应用拦截策略检查。攻击者若已被授权运行特定命令（即处于策略允