Bad_Hoist-WriteUp

Sleirsgoevy's version of BadHoist Write-up | CVE-2018-4386 !Note Background information about the PS4: The PlayStation 4 Console features a custom AMD x86-64 CPU 8 cores, it's Orbis OS is based on FreeBSD v9.0 with parts of NetBSD as well. It also includes a wide variety of additional open source...

ps4-11.50.github.io

ps4-11.50.github.io ps4 cve-2008-3531...

PS4-5.05-Kernel-Exploit

PS4 5.05 Kernel Exploit Краткое описание В этом проекте вы найдёте полную реализацию второго эксплойта "bpf" для ядра PlayStation 4 на прошивке 5.05. Он позволяет выполнять произвольный код в режиме ядра, обеспечивая джейлбрейк и модификации системы на уровне ядра. Этот эксплойт также содержит ко...

PS4-5.05-Kernel-Exploit

PS4 5.05 커널 익스플로잇 개요 이 프로젝트에서는 PlayStation 4 5.05용 두 번째 "bpf" 커널 익스플로잇의 전체 구현을 찾을 수 있습니다. 커널로 임의 코드를 실행할 수 있게 하여, 시스템의 탈옥jailbreak 및 커널 수준 수정을 가능하게 합니다. 이 익스플로잇에는 Mira 및 Vortex의 HEN 페이로드에 대한 자동 실행 코드도 포함되어 있습니다. 이후 로드 시 일반적인 페이로드 런처가 실행됩니다. 이 버그는 qwertyoruiopz가 발견했으며, 그의 웹사이트 여기에서 호스팅되고 있습니다. 이...

PS5-UMTX-Jailbreak

PS5 UMTX Jailbreak Краткое описание Этот репозиторий содержит WebKit ROP-эксплойт для уязвимости гонки use-after-free в UMTX CVE-2024-43102, сообщённой Synacktiv. По сути, это порт стратегии эксплойта fail0verflow и flatz. Он злоупотребляет UAF для получения чтения/записи в стек потока ядра и...

PS4-webkit-exploit-6.XX

이 저장소에는 README가 없습니다...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc pour CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Utilisation : 1-appuyer sur le bouton share et faire une capture d'écran 2-avec ftp, aller au chemin :/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ vous trouverez la capture d'écran que vous avez faite. 3-copier-la sur le PC et...

ps4_8.00_vuln_poc

ps48.xxvulnpoc Моя версия CVE-2021-30858 для ps4 8.xx...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit 코드 실행 PoC 이 저장소는 CVE-2018-4441을 활용하여 PlayStation 4 펌웨어 6.20을 대상으로 하는 RCE 익스플로잇 PoCproof-of-concept를 포함합니다. 익스플로잇은 먼저 wkexploit.js에서 임의 읽기/쓰기 프리미티브와 임의 객체 주소 누수를 설정합니다. 그런 다음 index.html에서 ROP 체인을 실행하기 위한 프레임워크를 설정하며, 기본적으로 두 개의 하이퍼링크를 제공하여 테스트 ROP 체인을 실행합니다. 하나는 sysgetpid 시스템 콜을...

CVE-2026-12940 Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...

CVE-2026-42435

OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to inject environment variable assignments at the argv level. Attackers can bypass exec preflight handling to manipulate high-risk shell variables like SHELLOPTS and...

EUVD-2026-27253

OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to inject environment variable assignments at the argv level. Attackers can bypass exec preflight handling to manipulate high-risk shell variables like SHELLOPTS and...

GHSA-J6C7-3H5X-99G9 OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms

Summary Shell-wrapper detection missed env-argv assignment injection forms. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.2.22 = 2026.4.12 Impact Exec preflight handling missed shell-wrapper and argv-level environment assignment forms that could...

OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE)

Summary system.run allowed SHELLOPTS + PS4 environment injection to trigger command substitution during bash -lc xtrace expansion before the allowlisted command body executed. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.2.21-2 includes latest published npm version at...

Command Injection

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Command Injection via the system.run shell-wrapper. An attacker can execute arbitrary shell commands outside the intended allowlisted command body by injecting SHELLOPTS and PS4 environme...

EUVD-2016-8396

Malware in sbrugna...

EUVD-2005-2959

Malware in sbrugna...

EUVD-2022-42734

Malicious code in bioql PyPI...

RHEL 5 : bash (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution CVE-2016-7543 - The expansion...

RHEL 5 : bash (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution CVE-2016-7543 - bash: when...