Exploiting a 20 years old NTFS Vulnerability (swarm.ptsecurity.com)

Screenshot of swarm.ptsecurity.com: Exploiting a 20 years old NTFS Vulnerability

First screen, captured 1 year ago.

Looks similar

Screenshot of invariantlabs.ai: Accessing private GitHub repositories via MCP

Accessing private GitHub repositories via MCP (invariantlabs.ai)

98 points by gokhan 1 year ago | 25 comments

Screenshot of invariantlabs.ai: GitHub MCP exploited: Accessing private repositories via MCP

GitHub MCP exploited: Accessing private repositories via MCP (invariantlabs.ai)

477 points by andy99 1 year ago | 287 comments

Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.

mcp github prompt-injection ai-agents

Screenshot of blog.arusekk.pl: Sourcehut account takeover via build logs (XSS in ansi2html)

Sourcehut account takeover via build logs (XSS in ansi2html)(blog.arusekk.pl)

136 points by arusekk 1 month ago | 27 comments

A vulnerability writeup describing a wormable XSS in SourceHut's ansi2html.py that let attackers take over accounts of users viewing injected build logs.

sourcehut xss cve account-takeover