Skip to content

CVE-2025-55284

Named by 3 kept items in this workspace.

Search every workspace for CVE-2025-55284. It matches the name as written, so it can find other things that share it.

The items that name it 3

  • AI Agent Hacking Writeups
    repo2026-09-17It is written here as CVE-2025-55284 (Claude Code, data exfiltration with DNS).

    Claude Code, data exfiltration with DNS

  • Advanced Prompt Injection Techniques 2026: 7 Attack Chains
    article2026-07-04

    DNS-based exfiltration via indirect prompt injection: attacker plants payload in a repo file; Claude Code reads it, follows the injected instruction to read credential files (e.g. ~/.ssh/id_rsa), and issues a DNS lookup to [base64-encoded-secret].attacker.com, exfiltrating the secret via DNS query l

  • 973 MCP Packages, 71% Single-Maintainer: A Practitioner
    articleIt is written here as CVE-2025-55284 (Claude Code, no CVSS given: DNS exfiltration encoding stolen data in subdomain lookups).

    Claude Code, no CVSS given: DNS exfiltration encoding stolen data in subdomain lookups

All cves in this workspace.