CVE-2026-103548

The Itron MV-90 xi 3.0 contains improperly stored passwords within its configuration file. This vulnerability allows an attacker to decode both current passwords and password histories, potentially granting unauthorized access to the MV-90 application as any user. No specific remediation steps or...

agentic-ioc-scanner

agentic-ioc-scanner 针对自主AI编码工具的IOC扫描器——检测 Mini Shai-Hulud、Gemini CLI RCE、Cursor CVE-2026-26268 以及 DPRK PromptMink。 一个检测工具包，用于检测自主AI编码助手（Claude Code、Gemini CLI、Cursor）及其拉入仓库的依赖项是否受到危害。共十一个检查项，涵盖钩子注入、RCE配置、恶意依赖、Git钩子后门以及CI工作流篡改。IOC列表外部化——添加新指标无需修改代码。 配套博客文章：When the Tool Fights Back。 包含内容 1. IOC扫描器...

CVE-2026-6951

CVE-2026-6951 simple-git 远程代码执行 ★ CVE-2026-6951 simple-git --config 选项过滤器绕过 RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 概述 CVE-2026-6951 是 simple-git 中的一个远程代码执行漏洞，由 CVE-2022-25912 的不完整修复导致。尽管 -c 选项已被阻止，但等效的 --config 选项未被正确限制。能够控制 Git 参数的攻击者可以启用 ext...

CVE-2025-8110-Gogs-RCE-Exploit

Gogs CVE-2025-8110 RCE 漏洞利用 针对 Gogs 中 CVE-2025-8110 的自动 Python 漏洞利用脚本。该漏洞通过滥用 PutContents API（未能验证文件路径是否为符号链接）实现远程代码执行（RCE）。通过符号链接覆盖内部 .git/config 文件，我们可以注入恶意 sshCommand 来触发反向 Shell。 🛠️ 前提条件 确保已安装 Python 3 以及必要的依赖项： pip install requests rich beautifulsoup4 你还必须安装 git 并确保其在 $PATH 中可用，以便进行仓库克隆和提交。 ⚙️...

CVE-2025-65964

n8n Git Hooks CTF 演示 ⚠️ 本仓库仅供教育和CTF演示目的 使用。 场景 自动化平台（例如 n8n）将Git操作作为工作流的一部分。 该工作流允许通过 git config 进行任意Git配置。 攻击者控制的工作流设置： core.hooksPath=hooks/ 随后，Git将从仓库目录执行钩子。 目标 演示以下内容： Git钩子在本地执行 钩子可以存在于克隆的仓库内部 滥用 core.hooksPath 可能导致命令执行 不包含任何有害命令。...

MSNSwitch Firmware MNT.2408 - Authentication Bypass

MSNSwitch Firmware MNT.2408 is susceptible to authentication bypass in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh. An attacker can arbitrarily configure settings, leading to possible remote code execution and subsequent unauthorized operations. id: CVE-2022-32429 info: name:...

CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read

CVE-2025-2539 - File Away WordPress 插件任意文件读取漏洞 📋 执行摘要 CVE ID: CVE-2025-2539 插件: File Away（版本 = 3.9.9.0.1） 漏洞类型: 需认证的任意文件读取 CVSS 评分: 8.5（高危） 利用可用性: 已有公开 PoC 影响: 未经授权的文件泄露，包括 wp-config.php、数据库凭据和系统文件 🎯 发现时间线 · 最初发现: 2025年12月，通过 GitHub 安全研究 · 首次利用测试: 2025年12月13日 · 成功入侵: 多个 WordPress 实例确认存在漏洞 🔧 技术细节...

CentOS Linux 8 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1786012443)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1786012443 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1762361016)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762361016 advisory. - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible fo...

Rocky Linux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786471937)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786471937 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

AlmaLinux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779467653)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779467653 advisory. - There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to...

AlmaLinux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786471937)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786471937 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

Exploit for PHP Remote File Inclusion in Wordpress

⚡ XWPRCE — CVE-2026-87902 Hacker Console WordPress Core g...

CVE-2026-79535

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...

CVE-2019-20372

Poc for CVE 2019-20372 [email protected] 描述 在 1.17.7 之前的 NGINX 版本中，结合特定的 errorpage 配置，会导致 HTTP 请求走私漏洞。攻击者可以在 NGINX 前端存在负载均衡器的环境下，读取未授权的网页内容。 CVE-2019-20372 利用工具 这个 Python 脚本旨在对 Web 服务器执行一系列安全测试，以检测运行易受攻击版本 Nginx 1.14.2 的服务器中存在的 CVE-2019-20372 漏洞。此外，该脚本会验证 HTTP 头、允许的 HTTP 方法，并尝试进行漏洞利用。 功能 1. ...

CVE-2026-23744-MCPJAM-RCE-exploit

CVE-2026-23744-MCPJAM-RCE-exploit 此 Python 概念验证工具针对目标应用暴露的易受攻击的 MCP（模型上下文协议）服务。该漏洞允许攻击者通过 /api/mcp/connect 端点提供任意服务器配置参数。 受影响的端点 POST /api/mcp/connect 使用的工具和技术 Python 3 requests 库 HTTP/JSON API 通信 MCP 服务接口 执行 安装依赖： pip install requests 运行概念验证： python exploit.py 概念验证流程 定义目标 MCP 端点。 构造恶意 serverConf...

Malicious code in @hrmony/pladddform-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de81847796671c2a5e9f97a94fae50352b0dff0816e4f0a7dfaf707fbb92629 index.js executes at module top level on require/import. It performs an unconditional POST check-in to...

Malicious code in @hrmony/api-gateway-service-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a48388c29a59698997efcb654da3c9182138846dad274f82ad2a1101843c5e4 index.js runs a top-level await fetch... on import that harvests installer host secrets and posts them to the hardcoded attacker endpoint...

cisco-CVE-2023-20009

关于 安全研究员：ly1g3，ly1g3attuta.io GPG 指纹：https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 概述：远程代码执行 - RCE from config file（由配置文件触发的远程代码执行） CVE：CVE-2023-20008 时间线： 发现 - ly1g3 上报 - ly1g3 修复 - Cisco Cisco AsyncOS 14.2.0 ESA（Cisco Secure Email）与 Cisco Secure Email a...

CVE-2026-41875

Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that changes admin's login and password. This software does implement simple protection against this...