CVE-2026-105812

Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, via crafted configuration values...

CVE-2026-106032

Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the environment of a user importing a Bedrock Agent to issue arbitrar...

CVE-2021-3560-Authentication-Agent

PolicyKit CVE-2021-3560 익스플로잇 인증 에이전트 기술 세부 사항 이 익스플로잇에 대한 블로그 게시물 : https://ricterz.me/posts/2022-04-28-a-new-exploit-method-for-cve-2021-3560-polkit-linux-privilege-escalation.txt http://noahblog.360.cn/a-new-exploit-method-for-cve-2021-3560-policykit-linux-privilege-escalation 빌드 및 사용법...

satellite

satellite Satellite는 요청을 필터링하여 올바른 대상이 페이로드를 받도록 보장하는 웹 페이로드 호스팅 서비스입니다. 매우 특정한 상황에서만 접근해야 하는 파일을 호스팅하는 데 유용한 서비스이기도 합니다. 빠른 시작 가이드 1. Ubuntu에서 .deb 파일을 사용하여 satellite 설치 dpkg -i satelliteX.X.Xlinuxamd64.tar.gz 2. 제공할 파일 생성 echo 'It worked!' /var/www/html/index.html 3. index.html의 필터링 파일 생성 echo ...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

weevely3

Weevely - 武器化ウェブシェル 説明 Weevely は、ポストエクスプロイテーション目的で設計されたウェブシェルであり、ランタイムにネットワーク越しに拡張できます。 weevely の PHP エージェントをターゲットのウェブサーバーにアップロードすると、リモートシェルアクセスが得られます。管理タスクの支援、アクセスの維持、状況認識の提供、権限の昇格、ターゲットネットワークへの拡散に役立つ30以上のモジュールを備えています。 インストール ページを読んで、weevely とその依存関係をインストールしてください。 Getting Started...

CVE-2022-26503

CVE-2022-26503 概要: Veeam Agent for Microsoft Windows の脆弱性 CVE-2022-26503 は、ローカルでの権限昇格を可能にします。この脆弱性の悪用に成功した攻撃者は、LOCAL SYSTEM 権限で任意のコードを実行できる可能性があります。 @ultrayoba に感謝します。 パッチ: 実装されたパッチは、逆シリアル化の痕跡を示しています: Veeam 公式 KB の記載: Veeam Agent for Microsoft Windows は、Microsoft .NET...

Zerodapi

Zerodai 문서 시작하세요! pip install zerodai==0.0.0.20 export zerodapikey="TUAPIKEY" API 키 가져오기 https://zerodai.com 대화형 단순 채팅 - 메모리 없음 from zerodai import zerodai import os zerodai.apiauthos.getenv"zerodapikey" messages = while True: prompt = input" " if prompt == "exit": break messages.append"role":...

CVE-2019-19231

CVE-2019-19231 https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html...

DROS-VEP-lite

🛡️ VEP: Open Agent Security Research Testbed A Composable, System-Level Evaluation Infrastructure for Post-Compromise & Physical AI Research "VEP Vulnerability & Exploitability Protocol is an open, implementation-independent research evaluation environment for studying Agent security controls at...

CVE-2026-106032 Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import

Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the environment of a user importing a Bedrock Agent to issue arbitrar...

CVE-2026-106032

The Amazon Bedrock AgentCore Starter Toolkit is vulnerable to Server-Side Request Forgery (SSRF) and local file read in versions prior to 0.3.14 . The root cause is unrestricted external OpenAPI reference resolution during the processing of the agent import functionality. An authenticated remote ...

CVE-2026-105812

The Amazon Bedrock AgentCore Starter Toolkit before version 0.3.14 is vulnerable to a code injection flaw (CWE-94) within its agent import functionality. The root cause is the lack of safe literal encoding for configuration values when generating Python source code. An authenticated same-account ...

CVE-2026-79814

An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute...

CVE-2026-79815

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint...

CVE-2026-79806

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges on the affected Linux client...

CVE-2026-79812

A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated local attacker to interrupt the normal operation of the agent service...

CVE-2026-79808

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the availability of the affected service...

CVE-2026-79801

A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client syste...

CVE-2026-76751

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent...