Tags
692 tags over 2,474 records, most records first. The red number is how many are live; each tag has its own page. Tags are written by the classifier and folded into one spelling each; a tag needs two records, or a live one, to be listed.
Attack types · The technique or kind of harm.103
- rce22/314
- deepfake3/195
- dos6/166
- ssrf144
- path-traversal1/132
- fraud6/130
- access-control5/117
- data-leak12/116
- auth-bypass11/79
- xss75
- prompt-injection14/74
- command-injection5/65
- impersonation1/60
- supply-chain15/57
- credential-theft10/57
- data-breach27/49
- social-engineering4/48
- code-injection1/48
- voice-cloning41
- deserialization40
- idor39
- malware11/37
- privilege-escalation5/36
- phishing7/32
- adversarial-evasion8/31
- sandbox-escape1/27
- arbitrary-file-read1/25
- sql-injection23
- backdoor13/22
- redos22
- resource-exhaustion2/21
- investment-scam21
- ransomware11/20
- crypto-scam20
- dns-rebinding20
- extortion3/19
- financial-fraud1/19
- romance-scam18
- jailbreak2/16
- buffer-overflow16
- espionage10/15
- data-poisoning4/15
- arbitrary-file-write2/14
- cors14
- csrf14
- mass-assignment14
- api-key-exposure3/13
- privacy4/11
- session-hijacking2/10
- account-takeover1/10
- botnet5/9
- file-upload1/9
- model-extraction9
- input-validation8
- kyc-bypass8
- zero-day5/7
- arbitrary-file-upload7
- integer-overflow7
- misconfiguration7
- spoofing2/6
- disinformation6
- memory-corruption6
- symlink6
- bec1/5
- toctou1/5
- use-after-free1/5
- xxe1/5
- identity-theft5
- open-redirect5
- timing-attack5
- intrusion1/4
- membership-inference1/4
- dependency-confusion4
- ssti4
- tenant-isolation4
- ai-generated-malware1/3
- race-condition1/3
- api-abuse3
- cache-poisoning3
- clickfix3
- cookie-leak3
- influence-operation3
- recursion3
- trust-remote-code3
- unauthorized-action3
- allowlist-bypass2
- c22
- camera-hijack2
- cleartext-storage2
- confused-deputy2
- cypher-injection2
- dga2
- file-deletion2
- hallucination2
- harassment2
- human-trafficking2
- nudify2
- propaganda2
- search-manipulation2
- template-injection2
- terrorism2
- violence2
- exploited-in-the-wild1/1
Stacks and products · Languages, frameworks, products and services named in the records.148
- mcp2/202
- langflow125
- vllm106
- open-webui97
- flowise86
- agents27/78
- langchain40
- litellm37
- gradio34
- ollama22
- llama.cpp21
- rag3/20
- claude-code2/20
- oauth1/16
- dify15
- nvidia-nemo15
- chatgpt2/14
- red-team2/13
- gguf13
- github-copilot13
- android9/11
- lollms10
- anythingllm9
- linux6/8
- claude1/8
- sglang1/8
- copilot8
- facial-recognition8
- chromadb7
- comfyui7
- pypi7
- chatbot6
- nvidia-tensorrt-llm6
- openclaw6
- jwt5
- llamaindex5
- malware-detection5
- rbac5
- websocket5
- php2shell2/4
- claude-desktop1/4
- gemini1/4
- cursor4
- langchain-chatchat4
- langgraph4
- lobe-chat4
- localai4
- multimodal4
- npm4
- pyodide4
- qdrant4
- sdk4
- vector-database4
- fortimail3/3
- apt2/3
- fbi2/3
- git2/3
- ios2/3
- windows2/3
- chrome1/3
- code-generation1/3
- enterprise-ai1/3
- diffusers3
- fastmcp3
- fine-tuning3
- guardrails-ai3
- inference-server3
- transformers3
- binance2/2
- fortimanager2/2
- lora2/2
- revolve2/2
- ruby-on-rails2/2
- fortios1/2
- gmail1/2
- grok1/2
- microsoft-teams1/2
- amazon-q2
- api-key2
- azure-openai2
- browser-use2
- clawdbot2
- connectwise2
- copilot-studio2
- docker2
- edge-ai2
- kubernetes2
- langchain4j2
- mindsdb2
- n8n2
- nemoclaw2
- persistent-memory2
- python2
- semantic-kernel2
- typescript2
- weaviate2
- airplay1/1
- alpine-linux1/1
- apify1/1
- arcticrat1/1
- artex-ai1/1
- bluetooth1/1
- browser-extension1/1
- btcpay-server1/1
- codex1/1
- cpguard1/1
- cursor-ai1/1
- darkblinders1/1
- epuap1/1
- flexplm1/1
- forgerock1/1
- fortisase1/1
- google-calendar1/1
- gsocket1/1
- keplr1/1
- large-reasoning-models1/1
- lnbits1/1
- lxd1/1
- mcpvenom1/1
- microcloud1/1
- microsoft-paint1/1
- msecure1/1
- n-central1/1
- near-ai1/1
- netamloader1/1
- node.js1/1
- node-red1/1
- openssh1/1
- paprat1/1
- polymarket1/1
- q-learning1/1
- qlik-sense1/1
- qubole1/1
- red hat quay1/1
- retrieval-augmented-generation1/1
- rosstat1/1
- sas1/1
- screenconnect1/1
- sogou-input-method1/1
- sysgorat1/1
- veeam1/1
- vision-encoders1/1
- vision-transformers1/1
- vscode1/1
- web3auth1/1
- windchill1/1
- wordpress1/1
- xen-orchestra1/1
Vendors · The company whose product or service was involved.21
Threat actors and campaigns · Named groups, campaigns and tools.10
- artex2/4
- cairn1/3
- storm-09401/3
- apt282
- fraudgpt2
- lamehug2
- lazarus2
- storm-21392
- apt291/1
- apt381/1
Sectors and channels · Where it happened: an industry, a platform, a channel.18
Standards and catalogues · CISA KEV listings and framework references.3
Other · Tags that fit no group yet.389
- breach11/13
- pii8/9
- cve7/7
- shinyhunters1/7
- pgedge7
- active-exploitation5/6
- personal-data1/6
- fortiguard5/5
- cloud4/5
- credentials3/5
- exploitation3/5
- ukraine3/5
- arxiv4/4
- kev4/4
- exploitation-in-the-wild2/4
- side-channel2/4
- indictment3/3
- third-party3/3
- adversarial-perturbation2/3
- black-box2/3
- cloud-security2/3
- critical2/3
- honeypot2/3
- iot2/3
- memory-leak2/3
- memory-poisoning2/3
- mfa-bypass2/3
- cisa1/3
- customer-data1/3
- evaluation1/3
- exposure1/3
- gpu1/3
- mitm1/3
- mongodb1/3
- pii-leak1/3
- spyware1/3
- watermarking1/3
- markdown3
- out-of-bounds-read3
- sso3
- 2fa2/2
- active-storage2/2
- ai-assisted2/2
- airlines2/2
- availability-attack2/2
- brotli2/2
- critical-infrastructure2/2
- cryptography2/2
- cyberattack2/2
- data-theft2/2
- hardware-security2/2
- iran2/2
- nas2/2
- patch-tuesday2/2
- reasoning-models2/2
- reinforcement-learning2/2
- russia2/2
- safety2/2
- sonicwall2/2
- virtualization2/2
- ai-enabled-attack1/2
- ai-security1/2
- alignment1/2
- api-token1/2
- china-nexus1/2
- credential-access1/2
- credential-stuffing1/2
- crypto-theft1/2
- cryptojacking1/2
- default-credentials1/2
- guardrails1/2
- hardware-wallet1/2
- improper-authentication1/2
- inference1/2
- insider-threat1/2
- llmjacking1/2
- machine-learning1/2
- mobile-agents1/2
- open-weight1/2
- out-of-bounds-write1/2
- quantization1/2
- remote-access1/2
- safety-alignment1/2
- ssh1/2
- state-sponsored1/2
- supply-chain-breach1/2
- tool-poisoning1/2
- tool-use1/2
- unpatched1/2
- webshell1/2
- aitm2
- assertion-failure2
- automated-exploitation2
- black-box-attack2
- cloud-breach2
- deception2
- diffusion-models2
- generative-ai2
- hard-coded-credentials2
- hash-collision2
- heap-corruption2
- improper-authorization2
- india2
- info-disclosure2
- insecure-deserialization2
- insecure-permissions2
- keydrift2
- logging2
- malta2
- memory-manipulation2
- missing-auth2
- misuse2
- null-pointer-dereference2
- oauth22
- oidc2
- out-of-memory2
- permission-bypass2
- policy-bypass2
- pump-and-dump2
- query-injection2
- reasoning-traces2
- reconnaissance2
- redis2
- smishing2
- telemetry2
- token-exposure2
- token-leak2
- trojan2
- voice-clone2
- vpn2
- weak-crypto2
- weak-hash2
- zeromq2
- 3am1/1
- abstention1/1
- account-hijack1/1
- acoustic-side-channel1/1
- activemq1/1
- ad-fraud1/1
- adversarial-examples1/1
- agent-defense1/1
- agent-safety1/1
- agent-swarm1/1
- agentic1/1
- agentic-rl1/1
- ai-assistant1/1
- ai-discovered-threat1/1
- ai-infrastructure1/1
- ai-summary1/1
- amadeus1/1
- amplifon1/1
- anti-fox1/1
- arbitrary-file-deletion1/1
- aur0ra1/1
- backdoors1/1
- beget1/1
- benchmarking1/1
- bitcoin1/1
- blind-eagle1/1
- bomb-threat1/1
- boot-loop1/1
- brazil1/1
- browser1/1
- bug-bounty1/1
- business-email-compromise1/1
- byod1/1
- byod-gang1/1
- c3rb3r1/1
- campaign1/1
- central-asia1/1
- cereal1/1
- certificate1/1
- certificate-authority1/1
- chain-of-thought1/1
- chainalysis1/1
- chainstack1/1
- ci1/1
- cisa-advisory1/1
- cl-unk-12111/1
- cloud-infrastructure1/1
- coding-harness1/1
- compromise1/1
- connected-cars1/1
- container-security1/1
- coordinated-attack1/1
- crypto-drainer1/1
- cryptocurrency-theft1/1
- cve-2026-xxxx1/1
- cvss-101/1
- cwpdoor1/1
- cyber-heist1/1
- dark-web1/1
- darkvigil1/1
- data-auditing1/1
- deepmind1/1
- defacement1/1
- device-code1/1
- digicert1/1
- dispatch1/1
- dns-hijacking1/1
- doj1/1
- earn-then-exploit1/1
- election-systems1/1
- elevation1/1
- email-compromise1/1
- emergency-apps1/1
- emudhra1/1
- environmental-injection1/1
- eol1/1
- ethersphere1/1
- europe1/1
- exchange1/1
- exploit1/1
- fault-injection1/1
- federated-learning1/1
- fem1/1
- fgfm1/1
- finetuning1/1
- firewalls1/1
- firmware1/1
- florida1/1
- forecasting1/1
- forum1/1
- french-blood-bank1/1
- ftpsftp1/1
- ghostmap1/1
- ghsa-r639-rr7r-x72w1/1
- ghsa-v9h7-jj4g-f8621/1
- gms1/1
- gold-ogre1/1
- gorbag1/1
- government-targeting1/1
- gradient-inversion1/1
- gta61/1
- gui1/1
- hackers1/1
- hacktivism1/1
- haiou1/1
- hard-coded-password1/1
- harvard1/1
- helpdesk1/1
- hijack1/1
- hoax1/1
- hot-wallets1/1
- http/21/1
- http21/1
- hypervisor1/1
- ics1/1
- imagemagick1/1
- imessage1/1
- industrial-control1/1
- integer-truncation1/1
- investigation1/1
- invoice-fraud1/1
- italy1/1
- key-compromise1/1
- keystroke-inference1/1
- knowledge-extraction1/1
- knowledge-poisoning1/1
- knowledge-superposition1/1
- latent-space1/1
- law-enforcement1/1
- live-validation1/1
- llm-assistants1/1
- llm-inference1/1
- localization1/1
- lockdown-mode1/1
- logit-laundering1/1
- loyalty-program1/1
- luna-moth1/1
- malicious-repository1/1
- manipulation1/1
- mcphantom1/1
- medical1/1
- memorization1/1
- mercenary-spyware1/1
- michigan-state-university1/1
- mixture-of-experts1/1
- mobile1/1
- mobile-networks1/1
- model-hijacking1/1
- msp1/1
- n-able1/1
- n-day1/1
- netscaler1/1
- netweaver1/1
- network-switches1/1
- norad1/1
- north-korea1/1
- o-ran1/1
- osaka1/1
- ospf1/1
- ot1/1
- outlook1/1
- parameter-poisoning1/1
- password-manager1/1
- passwords1/1
- patch1/1
- payment-card-theft1/1
- pci1/1
- pdf1/1
- persistence1/1
- phi1/1
- philippines1/1
- phlaas1/1
- pii-exposure1/1
- plex2shell1/1
- pointer-authentication1/1
- poland1/1
- preprocessing1/1
- pro-russian1/1
- prompt-adware1/1
- prompt-extraction1/1
- prompt-stealing1/1
- queens public library1/1
- rat1/1
- refrigeration1/1
- reverse-shell1/1
- root-access1/1
- routing-fingerprint1/1
- rsa1/1
- saas1/1
- sabotage1/1
- safety-warning1/1
- sanctions1/1
- sandbagging1/1
- sandbox-evasion1/1
- scambaiting1/1
- scope-violation1/1
- search-agents1/1
- secret-stealer1/1
- server-misconfiguration1/1
- service-disruption1/1
- signature-verification1/1
- silentair1/1
- silentdelivery1/1
- skill-optimization1/1
- skill-poisoning1/1
- slippynunchucks1/1
- small-language-models1/1
- social-bias1/1
- social-security-numbers1/1
- south-asia1/1
- sparrow1/1
- spearphishing1/1
- sponge-attack1/1
- sql-server1/1
- sslvpn1/1
- step-zero1/1
- structured-output1/1
- supermarkets1/1
- swarm1/1
- synology1/1
- synthetic1/1
- system-prompt1/1
- taipei1/1
- tee1/1
- temporal-privacy1/1
- thought-injection1/1
- threat-actor1/1
- threat-notifications1/1
- tool-update-gap1/1
- trezor1/1
- tsmc1/1
- turla1/1
- unauthorized-usage1/1
- universities1/1
- university-of-texas-at-arlington1/1
- unlearning1/1
- vanderbilt-university1/1
- vector-integrity1/1
- video1/1
- videostrong1/1
- voice-spoofing1/1
- volta1/1
- vulnerability-reproduction1/1
- warden1/1
- watering-hole1/1
- web-dispatcher1/1
- web-fraud1/1
- web-host1/1
- weight-manipulation1/1
- whitearmor1/1
- wiper1/1
- workos1/1
- world-model1/1
- xai1/1
- xen1/1
- york-university1/1
875 live tag mentions across the directory.