Node.js-CVE-2024-39943

Node.js HFS 命令执行漏洞 CVE-2024-39943 白帽学校第3期 – 鲁正民 @JenmrR 摘要 在基于 Node.js 的 HFS 服务器环境中，存在一个漏洞，该漏洞会将上传文件的内容通过 childprocess.execSync 执行。 攻击者可以通过文件上传功能直接执行操作系统命令，并可查看服务器内部命令结果或控制系统。 该漏洞对应 CVE-2024-39943，会产生与命令注入（远程代码执行）同等级别的威胁。 环境配置与运行 1. 通过 Docker 环境运行服务器 2. 服务器通过 /upload 路径接收文件上传，并将上传的文件内容直接作为命令执行 3...

Flowise-RCE-CVE-2025-59528

CVE-2025-59528 — Flowise AI 认证远程代码执行 RCE 概述 CVE ID: CVE-2025-59528 受影响软件: Flowise AI 受影响版本: = 3.0.4 已修复版本: 3.0.5 及更高版本 严重程度: 严重 作者: r3nsi15 日期: 2025 描述 Flowise AI 版本 3.0.4 及更早版本允许经过身份验证的用户通过向 /api/v1/node-load-method/customMCP 端点发送精心构造的 JavaScript 载荷，在主机服务器上实现远程代码执行 RCE 。 customMCP 节点的 load...

Suricata-Rule-for-Detecting-CVE-2025-55182

Regla de Detección de Suricata para CVE‑2025‑55182 Envenenamiento de Acción de Next.js → RCE de Node.js con execSync 📌 Descripción Este documento explica cómo la regla de Suricata SID 900304 detecta intentos de explotación de CVE‑2025‑55182 , una vulnerabilidad crítica en Next.js que permite Acti...

POC-CVE-2025-55182

CVE-2025-55182 Advanced Scanner Una utilidad de explotación completa para CVE-2025-55182 — Ejecución Remota de Código a través de Componentes del Servidor React en Next.js. El escáner crea automáticamente el payload multiparte y abusa de process.mainModule.require'childprocess'.execSync para logr...

CVE-2024-39943-Poc

CVE-2024-39943-Poc CVE-2024-39943 rejetto HFS（即 HTTP 文件服务器）3 在 0.52.10 之前的版本中，在 Linux、UNIX 和 macOS 上允许远程认证用户（如果拥有上传权限）执行操作系统命令。这是因为在执行 df 时使用了 shell（即使用了 Node.js 中 childprocess 的 execSync 而非 spawnSync）。 部署: ./hfs --config config.yaml...

@argos-ci/core: CI Branch Name OS Command Injection

CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...

GHSA-4X45-GXVP-6283 @argos-ci/core: CI Branch Name OS Command Injection

CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...

CVE-2025-55182

CVE-2025-55182 root@kitploit: POST /formaction HTTP/1.1 Host: localhost Content-Type: multipart/form-data; boundary=----Boundary Content-Length: 297 ------Boundary Content-Disposition: form-data; name="$ACTIONREF0" ------Boundary Content-Disposition: form-data; name="$ACTION0:0"...

PT-2026-89735

CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...

Allocation of Resources Without Limits or Throttling

Overview github.com/containerd/containerd/pkg/cri/server is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer an...

GHSA-7JXH-36Q5-GCQV containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service

Impact A bug in containerd's CRI ExecSync implementation allows exec probes and lifecycle hooks with background child processes to keep containerd's stdio-drain goroutines indefinitely blocked. Because the I/O drain phase lacks a default timeout or context cancellation handling, repeated ExecSync...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the drainExecSyncIO function in internal/cri/server/containerexecsync.go, pkg/cri/server/containerexecsync.go, and pkg/cri/sbserver/containerexecsync.go. An attacker can cause...

containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service

Impact A bug in containerd's CRI ExecSync implementation allows exec probes and lifecycle hooks with background child processes to keep containerd's stdio-drain goroutines indefinitely blocked. Because the I/O drain phase lacks a default timeout or context cancellation handling, repeated ExecSync...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the drainExecSyncIO function in internal/cri/server/containerexecsync.go, pkg/cri/server/containerexecsync.go, and pkg/cri/sbserver/containerexecsync.go. An attacker can cause...

Info-Sys-Security-CVE-2025-55182

CVE-2025-55182 安全实验室（“React2Shell”） 本仓库包含一个用于在受控 React Server Components 环境中分析 CVE-2025-55182 的本地学术实验室。该实验室模拟了该漏洞、其利用方式以及应用补丁后的效果。 📁 仓库结构 核心应用程序 app/vulnerable/ ：存在漏洞的 React 应用程序配置文件。 src/framework/entry.rsc.tsx：包含 不安全的反序列化 点，其中 flightaction 负载通过 execSync 执行。 模拟未打补丁的 [email protected] 的行为。...

PT-2026-89204

Impact A bug in containerd's CRI ExecSync implementation allows exec probes and lifecycle hooks with background child processes to keep containerd's stdio-drain goroutines indefinitely blocked. Because the I/O drain phase lacks a default timeout or context cancellation handling, repeated ExecSync...

CVE-2026-81562

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

CVE-2026-81562 AlexGladkov claude-in-mobile client.ts execSync os command injection

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

EUVD-2026-67004

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

CVE-2026-81562

CVE-2026-81562 is an OS command injection vulnerability in AlexGladkov claude-in-mobile version 3.10.2 , affecting the execSync function in the file src/adb/client.ts . A local attacker with low privileges can manipulate input to inject operating system commands, leading to partial compromise of ...