| ... |
|
ATR-2026-00020-system-prompt-leak.yaml
|
10.11 KB |
|
ATR-2026-00021-api-key-exposure.yaml
|
8.6 KB |
|
ATR-2026-00075-agent-memory-manipulation.yaml
|
6.65 KB |
|
ATR-2026-00102-disguised-analytics-exfiltration.yaml
|
5.32 KB |
|
ATR-2026-00113-credential-theft.yaml
|
5.67 KB |
|
ATR-2026-00114-oauth-token-abuse.yaml
|
5.3 KB |
|
ATR-2026-00115-env-var-harvesting.yaml
|
5.77 KB |
|
ATR-2026-00136-tool-response-data-piggyback.yaml
|
5.91 KB |
|
ATR-2026-00141-example-format-key-leak.yaml
|
3.81 KB |
|
ATR-2026-00142-piggyback-transition-words.yaml
|
4.54 KB |
|
ATR-2026-00145-obfuscated-key-disclosure.yaml
|
3.69 KB |
|
ATR-2026-00146-env-var-existence-probe.yaml
|
3.85 KB |
|
ATR-2026-00150-credential-in-tool-response.yaml
|
4.34 KB |
|
ATR-2026-00152-obfuscated-credential-leak.yaml
|
4.6 KB |
|
ATR-2026-00162-skill-credential-exfil-combo.yaml
|
4.88 KB |
|
ATR-2026-00201-credential-pipe-exfiltration.yaml
|
4.54 KB |
|
ATR-2026-00212-mcp-atlassian-credential-leak.yaml
|
7.15 KB |
|
ATR-2026-00261-markdown-image-exfiltration.yaml
|
6.39 KB |
|
ATR-2026-00274-api-key-generation-request.yaml
|
6.81 KB |
|
ATR-2026-00275-system-prompt-training-data-extraction.yaml
|
6.19 KB |
|
ATR-2026-00290-divergence-repeat-word-training-extraction.yaml
|
5.84 KB |
|
ATR-2026-00291-biometric-surveillance-personal-data-request.yaml
|
8.05 KB |
|
ATR-2026-00293-educational-records-personal-data-request.yaml
|
7.19 KB |
|
ATR-2026-00294-financial-pii-personal-data-request.yaml
|
8.46 KB |
|
ATR-2026-00295-medical-pii-personal-data-request.yaml
|
9.18 KB |
|
ATR-2026-00405-markdown-image-url-exfiltration-xss.yaml
|
5.3 KB |
|
ATR-2026-00411-apikey-generation-completion-request.yaml
|
5.86 KB |
|
ATR-2026-00421-nl-covert-conversation-exfiltration.yaml
|
5.9 KB |
|
ATR-2026-00422-nl-credential-disclosure.yaml
|
6.02 KB |
|
ATR-2026-00423-nl-sensitive-file-disclosure.yaml
|
5.9 KB |
|
ATR-2026-00424-nl-system-prompt-leak.yaml
|
5.79 KB |
|
ATR-2026-00426-nl-output-injection-credential-leak.yaml
|
5.66 KB |
|
ATR-2026-00431-chatbox-history-exfiltration-prompt-injection.yaml
|
6.79 KB |
|
ATR-2026-00449-spring-ai-chatmemory-cross-user-leak.yaml
|
8.09 KB |
|
ATR-2026-00471-garak-sysprompt-extraction-mixedunassigned.yaml
|
4.56 KB |
|
ATR-2026-00501-data-exfiltration-via-markdown-image-and-link-url-injection.yaml
|
8.85 KB |
|
ATR-2026-00504-tool-and-function-capability-enumeration.yaml
|
6.89 KB |
|
ATR-2026-00505-system-prompt-extraction-instruction-dump-request.yaml
|
8.85 KB |
|
ATR-2026-00514-system-prompt-extraction.yaml
|
8.94 KB |
|
ATR-2026-00516-output-xss-via-llm.yaml
|
8.11 KB |
|
ATR-2026-00524-claude-code-anthropic-base-url-credential-exfil.yaml
|
11.52 KB |
|
ATR-2026-00548-cross-agent-session-context-leak.yaml
|
6.85 KB |
|
ATR-2026-00566-librechat-is-a-chatgpt-clone-with-additi.yaml
|
5.3 KB |
|
ATR-2026-00569-agent-mcp-path-traversal-arbitrary-file-access.yaml
|
3.69 KB |
|
ATR-2026-00571-xss-in-agent-mcp-rendered-output.yaml
|
3.85 KB |
|
ATR-2026-00574-semantic-paraphrased-context-extraction.yaml
|
5.49 KB |
|
ATR-2026-00578-zen-mcp-path-traversal-blacklist-bypass.yaml
|
8.52 KB |
|
ATR-2026-00580-mcp-session-id-token-in-url-query.yaml
|
10.41 KB |
|
ATR-2026-00583-mcp-env-secret-file-read-without-consent.yaml
|
9.25 KB |
|
ATR-2026-00702-ipi-credential-exfil-via-agent-action.yaml
|
5.73 KB |
|
ATR-2026-00703-ipi-financial-data-exfil-indirect.yaml
|
4.32 KB |
|
ATR-2026-00704-ipi-medical-genetic-data-exfil.yaml
|
4.32 KB |
|
ATR-2026-00705-ipi-location-address-browsing-exfil.yaml
|
3.94 KB |
|
ATR-2026-00706-ipi-physical-biometric-exfil.yaml
|
5.06 KB |
|
ATR-2026-00707-ipi-file-exfil-with-destroy-or-tamper.yaml
|
4.87 KB |
|
ATR-2026-00850-indirect-pi-credential-exfil-email.yaml
|
5.08 KB |
|
ATR-2026-00851-indirect-pi-financial-payment-exfil.yaml
|
4.75 KB |
|
ATR-2026-00852-indirect-pi-medical-record-exfil.yaml
|
5.71 KB |
|
ATR-2026-00853-indirect-pi-genetic-data-exfil.yaml
|
4.83 KB |
|
ATR-2026-00854-indirect-pi-location-data-exfil.yaml
|
4.39 KB |
|
ATR-2026-00855-indirect-pi-browsing-history-exfil.yaml
|
4.02 KB |
|
ATR-2026-00856-indirect-pi-address-pii-exfil.yaml
|
4.45 KB |
|
ATR-2026-00857-indirect-pi-cloud-file-exfil.yaml
|
4.85 KB |
|
ATR-2026-00858-indirect-pi-exfil-and-destroy.yaml
|
4.96 KB |
|
ATR-2026-00859-rag-injected-pii-exfil.yaml
|
4.56 KB |
|
ATR-2026-00860-indirect-pi-financial-transfer-hijack.yaml
|
4.55 KB |
|
ATR-2026-00861-indirect-pi-crypto-transfer-hijack.yaml
|
3.72 KB |
|
ATR-2026-00862-indirect-pi-mfa-code-exfil.yaml
|
4.69 KB |
|
ATR-2026-00863-shell-injection-data-exfil.yaml
|
4.58 KB |
|
ATR-2026-01450-svg-onload-xss-injection.yaml
|
4.89 KB |
|
ATR-2026-01451-img-onerror-xss-injection.yaml
|
4.03 KB |
|
ATR-2026-01452-obfuscated-javascript-xss.yaml
|
3.83 KB |
|
ATR-2026-01453-markdown-image-base64-exfil-carrier.yaml
|
5.12 KB |
|
ATR-2026-01454-direct-markdown-exfil-payload.yaml
|
4.16 KB |
|
ATR-2026-01455-new-instructions-injection-marker.yaml
|
4.23 KB |
|
ATR-2026-01456-debug-cli-mode-sysprompt-extraction.yaml
|
4.51 KB |
|
ATR-2026-01457-sysprompt-completion-clone-attack.yaml
|
5.55 KB |
|
ATR-2026-01458-compare-bots-sysprompt-fishing.yaml
|
4.17 KB |
|
ATR-2026-01459-variable-clone-sysprompt-technique.yaml
|
4.24 KB |
|
ATR-2026-01460-json-format-sysprompt-extraction.yaml
|
4.15 KB |
|
ATR-2026-01461-foreign-language-sysprompt-request.yaml
|
5.58 KB |
|
ATR-2026-01462-sysprompt-override-pseudo-admin.yaml
|
5.4 KB |
|
ATR-2026-01463-imend-imsystem-prompt-injection-format.yaml
|
3.55 KB |
|
ATR-2026-01464-indirect-pi-sysprompt-action-hijack.yaml
|
3.71 KB |
|
ATR-2026-01605-ssrf-aws-metadata-endpoint.yaml
|
3.54 KB |
|
ATR-2026-01606-ssrf-internal-network-scan.yaml
|
4.83 KB |
|
ATR-2026-01607-ssrf-localhost-service-probe.yaml
|
4.01 KB |
|
ATR-2026-01608-ssrf-file-scheme-local-read.yaml
|
3.17 KB |
|
ATR-2026-01753-ransom-email-exfil-delete-extortion.yaml
|
4.44 KB |
|
ATR-2026-01754-ransom-file-cloud-exfil-delete-extortion.yaml
|
3.88 KB |
|
ATR-2026-01770-semantic-pii-credential-extraction.yaml
|
14.23 KB |
|
ATR-2026-01772-semantic-internal-state-recon.yaml
|
10.23 KB |
|
ATR-2026-01807-asb-bulk-data-exfil-external.yaml
|
4.8 KB |
|
ATR-2026-01862-llmail-email-tool-exfil-confirmation.yaml
|
5.2 KB |
|
ATR-2026-01863-llmail-post-summary-exfil-directive.yaml
|
4.1 KB |
|
ATR-2026-01864-llmail-obfuscated-exfil-address.yaml
|
4.1 KB |
|
ATR-2026-01890-file-exfiltration.yaml
|
3.53 KB |
|
ATR-2026-01891-surveillance-exfiltration.yaml
|
3.06 KB |
|
ATR-2026-01892-env-exfiltration.yaml
|
2.75 KB |
|
ATR-2026-01893-system-recon-exfiltration.yaml
|
3.19 KB |
|
ATR-2026-01894-cookie-theft.yaml
|
2.8 KB |
|
ATR-2026-01895-contact-exfiltration.yaml
|
2.73 KB |
|
ATR-2026-01924-system-instruction-extraction-reformat.yaml
|
5.59 KB |
|
ATR-2026-01929-mcp-unauthenticated-transport-token-fallback.yaml
|
8.64 KB |
|
ATR-2026-01946-cloud-metadata-ssrf-ip-encoding-bypass.yaml
|
5.52 KB |
|
ATR-2026-01948-netlicensing-mcp-product-number-path-traversal-token-leak.yaml
|
5.26 KB |
|
ATR-2026-01957-m365-copilot-searchleak-open-redirect-exfil.yaml
|
5.09 KB |
|
ATR-2026-01961-meta-ads-mcp-unauth-token-leak.yaml
|
5.54 KB |
|
ATR-2026-01964-langchain-gmailtoolkit-indirect-prompt-injection-email-exfil.yaml
|
5.35 KB |
|
ATR-2026-01984-mcp-server-kubernetes-kubectl-generic-token-exfil.yaml
|
6.4 KB |
|
ATR-2026-01988-t1005-agent-local-data-staging-exfil.yaml
|
3.24 KB |
|
ATR-2026-02017-secret-key-exfiltration-request.yaml
|
4.26 KB |
|
ATR-2026-02026-oblique-sysprompt-extraction-transform.yaml
|
5.34 KB |
|
ATR-2026-02104-media-directive-tool-result-file-exfil.yaml
|
5.41 KB |
|
ATR-2026-02107-ssrf-internal-hostname-domain-allowlist-bypass.yaml
|
5.79 KB |
|
ATR-2026-02121-mixed-encoding-lfi-file-scheme-tool-argument.yaml
|
5.24 KB |
|
ATR-2026-02122-single-level-traversal-sensitive-config-file.yaml
|
5.13 KB |
|
ATR-2026-02140-ssrf-ipv6-hex-encoded-cloud-metadata-bypass.yaml
|
5.02 KB |
|
ATR-2026-02190-dns-exfiltration-ping-dig-encoded-subdomain.yaml
|
6 KB |
|
ATR-2026-02250-attachment-upload-tool-arbitrary-file-read.yaml
|
5.74 KB |
|
ATR-2026-02262-env-resolution-credential-exfil.yaml
|
6.54 KB |
|
ATR-2026-02304-preapproved-domain-encoded-path-exfil.yaml
|
6.55 KB |
|
ATR-2026-02351-wildcard-dns-ssrf-hostname-ip-encoding-bypass.yaml
|
6.38 KB |
|
ATR-2026-02373-langsmith-prompt-manifest-baseurl-exfil.yaml
|
6.97 KB |
|
ATR-2026-02406-mcp-sequential-id-enumeration.yaml
|
12.34 KB |
|
ATR-2026-02570-wallet-secret-material-in-agent-tool-payload.yaml
|
10.65 KB |
|
ATR-2026-02602-diagram-theme-css-injection.yaml
|
10.99 KB |
|
ATR-2026-02608-graph-query-remote-egress.yaml
|
9.82 KB |
|
ATR-2026-02621-prompt-mention-autofetch-internal-target.yaml
|
8.46 KB |
|
ATR-2026-02623-obfuscated-uri-scheme-sanitizer-bypass.yaml
|
11.08 KB |
|
ATR-2026-02649-vendor-fqdn-label-prefix-confusion.yaml
|
8.99 KB |
|
ATR-2026-02684-modern-credential-store-file-argument.yaml
|
10.76 KB |
|
ATR-2026-02703-sql-server-side-file-and-program-primitive.yaml
|
7.95 KB |
|
ATR-2026-02847-policy-justified-exfil-to-email.yaml
|
4.93 KB |
|
ATR-2026-02850-fake-documentation-forward-request.yaml
|
4.56 KB |
|
ATR-2026-02855-cross-email-exfil-relay.yaml
|
4.71 KB |
|
ATR-2026-02861-exfil-send-email-with-body-directive.yaml
|
4.58 KB |
|
ATR-2026-02866-idna-label-separator-in-fetch-url-host.yaml
|
10.43 KB |