58 matches found
SharpSCOM
SharpSCOM Una herramienta C para interactuar con Microsoft System Center Operations Manager SCOM. Esta herramienta ha sido probada contra la versión 10.22.10118.0 del servidor SCOM. La integración SSPI se proporciona a través de la librería nsspi de Kevin Thompson antiduh, publicada bajo la...
CVE-2024-41570
CVE-2024-41570 | Havoc C2 SSRF 导致 RCE | 通过 WebSocket 实现自动反向 Shell 利用 本项目提供了一个基于 Python 的概念验证（PoC）脚本，用于利用脆弱的 WebSocket 服务。该脚本自动化了代理注册、WebSocket 有效载荷投递以及远程命令执行，以建立反向 Shell。 功能特性 向目标服务注册一个代理。 打开 WebSocket 并发送握手和认证有效载荷。 通过反向 Shell 远程执行命令。 提供带清晰指引的引导式工作流程。 先决条件 机器上已安装 Python 3.x。 通过运行以下命令安装所需依赖：...
CVE-2024-28741-northstar-agent-rce-poc
NorthStar C2代理RCE via 存储型XSS CVE-2024-28741的代理RCE PoC，NorthStar C2中的一个存储型XSS漏洞。 此漏洞利用通过向团队服务器发送多个恶意代理注册请求，在日志网页中逐步构建一个可运行的JavaScript负载。该XSS可用于在NorthStar C2代理上执行命令。 完整说明：https://blog.chebuya.com/posts/discovering-cve-2024-28741-remote-code-execution-on-northstar-c2-agents-via-pre-auth-stored-xss/...
CVE-2026-63077
CVE-2026-63077 — JetBrains TeamCity Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 9.8 — Actively Exploited in the Wild This repository contains a fully functional proof-of-concept PoC exploit for CVE-2026-63077 , a critical deserialization vulnerability in...
SUSE CVE-2026-72342
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration race mlx5ehvvhcastatscreate registers the stats agent through mlx5hvvhcaagentcreate. The helper publishes the agent in hvvhca-agentstype under agentslock and immediately schedules a...
CVE-2026-59795
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible...
CVE-2026-59795
CVE-2026-59795 affects JetBrains TeamCity prior to 2026.1.2. The vulnerability is a stored XSS via unauthenticated agent registration, enabling cross-site script execution under defined conditions. CVSSv3.1 base score 8.1 (HIGH) with network attack vector, low attack complexity, no privileges req...
EUVD-2026-42913
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible...
CVE-2026-55432 Coder's sub-agent app registration bypasses template port-sharing policy enforcement
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the CreateSubAgent RPC did not validate a requested app sharing level against the template's MaxPortSharingLevel before persisting workspace apps, letting a...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the CreateSubAgent process. An attacker can gain unauthorized access to workspace applications by registering sub-agent apps with a sharing level that exceeds the administrator's configured maximum, thereby...
SUSE CVE-2026-50141
Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate any other agent on the same server by injecting a forged agentid value into outgoing gRPC metadata. The server correctl...
CVE-2026-56077
CVE-2026-56077 concerns PraisonAI before 1.5.115, where an information disclosure vulnerability exists in the MultiAgentLedger component. The root cause is failure to enforce unique agent IDs during registration, enabling attackers to share ledger instances and access sensitive data including sys...
User Impersonation
Overview Affected versions of this package are vulnerable to User Impersonation via the agentid metadata in the gRPC communication process. An attacker can impersonate other agents on the same server by injecting a forged value into outgoing metadata, leading to unauthorized cross-tenant actions...
PT-2026-50808
Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.5.115 Description An information disclosure issue exists in the MultiAgentLedger component. The system fails to enforce the uniqueness of agent IDs, allowing attackers to register agents with duplicate IDs. This...
Malicious code in gm-kilo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a35ea8669a2b02f60117ecc483176741399084b0fbebf11900d0a89505d9fb package.json declares an install lifecycle script that runs bin/gm-kilo.js install. At install time, the script executes bun x gm-plugkit@latest spoo...
MAL-2026-4574 Malicious code in gm-kilo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a35ea8669a2b02f60117ecc483176741399084b0fbebf11900d0a89505d9fb package.json declares an install lifecycle script that runs bin/gm-kilo.js install. At install time, the script executes bun x gm-plugkit@latest spoo...
Authentication Bypass
keylime is vulnerable to Authentication Bypass. The vulnerability is due to insufficient validation during agent registration, where a malicious actor can register a new agent with a different TPM while reusing an existing agent’s UUID, allowing the attacker to overwrite the legitimate agent...
EUVD-2025-198980
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
PT-2025-47950
Name of the Vulnerable Software and Affected Versions keylime affected versions not specified Description A flaw exists in keylime that allows an attacker to register a new agent using a different Trusted Platform Module TPM device while claiming an existing agent’s unique identifier UUID. This...