2673 matches found
CVE-2025-58370 Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference
Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions below 3.26.0 contain a vulnerability in the command parsing logic where the Bash parameter expansion and indirect reference were not handled correctly. If the agent was configured to auto-approve execution of...
Metasploit Weekly Wrap-Up 09/05/2025
Persistence Improvements and Exploits This week, the Metasploit team and the community has made improvements to some persistence modules such as Bash, which improves how they function behind the scenes. They have also been tagged with MITRE ATT&CK techniques. A new exploit has also been added thi...
📄 Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell
Ilevia EVE X1/X5 Server version 4.7.18.0.eden reverse rootshell exploit. A misconfiguration in the sudoers file permits passwordless execution of specific Bash shell scripts via sudo, exposing a critical privilege escalation vulnerability. When such scripts are writable by a web-facing user...
OPENSUSE-SU-2025:15526-1 libsixel-bash-completion-1.10.5-2.1 on GA media
These are all security issues fixed in the libsixel-bash-completion-1.10.5-2.1 package on the GA media of openSUSE Tumbleweed...
RCE-Foryou
RCE-Foryou Python tool for safely testing and exploiting RCE v...
Project-Frame-Jacking-The-Gallery-Heist
Executive Summary A comprehensive penetration test was conduc...
GHSA-CXM3-WV7P-598C Malicious versions of Nx were published
Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file system, collects credentials, and posts them to GitHub as a repo under user's accounts. Immediate Actions Required For all users, check if you were...
The Silent, Fileless Threat of VShell
The Silent, Fileless Threat of VShell By Sagar Bade · August 21, 2025 Introduction Linux environments are often seen as bastions of security, favored by developers, sysadmins, and security professionals for their stability, transparency, and resistance to malware. Compared to Windows, the attack...
ROOT-OS-DEBIAN-11-CVE-2022-3715 CVE-2022-3715 in rootio-bash - Patched by Root
Root has patched CVE-2022-3715 in the rootio-bash package for Root:Debian:11. Multiple fixed versions available...
Exploit for CVE-2023-1234
It is an offensive tool for SSH exploitation. The repository contains a proof of concept PoC exploit for CVE-2023-1234, which targets vulnerable proxycommand configurations on SSH clients. The target product/service is OpenBSD's SSH, and the vulnerability class/vector is remote command execution...
Malicious code in deserialize-object-bash-monitor-short (npm)
The package deserialize-object-bash-monitor-short was found to contain malicious code...
Malicious code in bash-good-zero-old-debug (npm)
The package bash-good-zero-old-debug was found to contain malicious code...
Malicious code in air-deploy-air-stub-bash (npm)
The package air-deploy-air-stub-bash was found to contain malicious code...
Malicious code in secure-daemon-bash-code-array (npm)
The package secure-daemon-bash-code-array was found to contain malicious code...
Malicious code in fast-bash-tree-reject-omicron (npm)
The package fast-bash-tree-reject-omicron was found to contain malicious code...
MAL-2025-32877 Malicious code in secure-daemon-bash-code-array (npm)
The package secure-daemon-bash-code-array was found to contain malicious code...
MAL-2025-22250 Malicious code in hash-bash-easy-xi-table (npm)
The package hash-bash-easy-xi-table was found to contain malicious code...
Malicious code in route-air-private-static-bash (npm)
The package route-air-private-static-bash was found to contain malicious code...