bleed

bleed bleed ist ein Tool zum Testen von Servern auf die 'Heartbleed'-Sicherheitslücke CVE-2014-0160. Verwendung root@kitploit: $ bleed example.org Verbinde... Sende Client Hello Warte auf Server Hello... Sende Heartbeat-Anfrage Unerwartetes EOF beim Empfangen des Record-Headers. Server hat...

CVE-2025-6543

CVE-2025-6543 Citrix Bleed 2 PoC...

CVE-2023-4966

CVE-2023-4966 Uno script di sfruttamento sviluppato per sfruttare la vulnerabilità di divulgazione delle informazioni Bleed Citrix CVE-2023-4966 Gli hacker hanno sfruttato ampiamente questa vulnerabilità del gateway Citrix e questo è uno script di sfruttamento con concorrenza abilitata e in grado...

overread

overread Simula o bug de overread CVE-2023-4966 do Citrix Bleed Este é o meu projeto final para Harvard CS50 Cybersecurity 2023. É sobre um bug. Um pequeno bug – com consequências enormes e contínuas. Nesta apresentação, compartilharei os “bleeding insights” do pequeno erro de um desenvolvedor. U...

CVE-2025-14847

MongoBleed PoC CVE-2025-14847 Ethische Offenlegung & Haftungsausschluss Dieses Tool wird ausschließlich zu Bildungszwecken und für die Verwendung in autorisierten Sicherheitsaudits bereitgestellt. Der Zweck dieses PoC ist es, Systemadministratoren und Sicherheitsforschern zu helfen: 1. Überprüfen...

Citrix-Bleed-Buffer-Overread-Demo

Citrix-Bleed-Buffer-Overread-Demo Il presente codice approssima funzionalmente la vulnerabilità Citrix Bleed CVE-2023-4699 dovuta alla gestione impropria del valore di ritorno di snprintf in C...

LockBit-Ransomware-Analysis

🔐 LockBit-Ransomware-Analyse – Citrix-Bleed-Ausnutzung 📌 Übersicht Dieses Projekt präsentiert eine detaillierte Bedrohungsanalyse und Incident-Response-Analyse des LockBit-Ransomware-Angriffs vom Oktober 2023 auf Boeing. Die Angreifer nutzten CVE-2023-4966 Citrix Bleed aus, um...

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 CVE-2025-5777 vulnerability to obtain initial access. "Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Remote Management and...

CVE-2026-43529

OpenClaw before 2026.4.10 contains a time-of-check-time-of-use vulnerability in the validateScriptFileForShellBleed function that allows local attackers to bypass workspace boundary checks. An attacker with workspace write access can race-condition swap the target file between validation and...

CVE-2026-43529 OpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validator

OpenClaw before 2026.4.10 contains a time-of-check-time-of-use vulnerability in the validateScriptFileForShellBleed function that allows local attackers to bypass workspace boundary checks. An attacker with workspace write access can race-condition swap the target file between validation and...

JLSEC-2026-419 When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's...

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure HTTP:// scheme and perform transfers with host...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the validateScriptFileForShellBleed function. An attacker can cause the preflight analysis to inspect a different file than the one tha...

EUVD-2026-18490

OpenClaw's complex interpreter pipelines could skip exec script preflight validation...

Incomplete List of Disallowed Inputs

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs through the validateScriptFileForShellBleed process. An attacker can execute unauthorized script content by crafting piped, substituted, or subshell...

Duplicate Advisory: OpenClaw's complex interpreter pipelines could skip exec script preflight validation

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fvx6-pj3r-5q4q. This link is maintained to preserve external references. Original Description OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protecti...

GHSA-RF75-G96H-J3RM Duplicate Advisory: OpenClaw's complex interpreter pipelines could skip exec script preflight validation

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fvx6-pj3r-5q4q. This link is maintained to preserve external references. Original Description OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protecti...

Incomplete List of Disallowed Inputs

Overview @openclaw/discord is an OpenClaw Discord channel plugin Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs through the validateScriptFileForShellBleed process. An attacker can execute unauthorized script content by crafting piped, substituted, or...

CVE-2026-34425 OpenClaw - Shell-Bleed Protection Preflight Validation Bypass

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped...

CVE-2026-34425 OpenClaw - Shell-Bleed Protection Preflight Validation Bypass

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped...

CVE-2026-34425

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass in the shell-bleed protection. The bypass lets attackers craft piped, subshell, or command-substitution forms that the parser fails to recognize, enabling execution of blocked script content that would otherwise be bl...