Lucene search
+L

152 matches found

Kitploit
Kitploit
•added 2026/10/10 12:26 p.m.•15 views

porterminal

Give your agent any computer One command. One URL. A real terminal for your agent, a live view for you. Run Porterminal on a Windows, macOS, or Linux computer and give the generated link to your AI agent. It gets a real shell with the files, tools, and projects on that machine. Open the same link...

6.4AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/10/10 8:19 a.m.•48 views

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/10 8:19 a.m.•18 views

mosh

Mosh:移动 Shell Mosh 是一个远程终端应用,支持间歇性连接、允许漫游,并提供用户按键的推测性本地回显和行编辑。 它旨在支持 SSH 的典型交互式使用场景,此外: Mosh 在客户端休眠或稍后唤醒、或暂时失去网络连接时保持会话活跃。 Mosh 允许客户端和服务器“漫游”并更换 IP 地址,同时保持连接存活。与 SSH 不同,Mosh 可在 Wi-Fi 网络之间切换、或从 Wi-Fi 切换到蜂窝数据再到有线以太网时使用。 Mosh...

6AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/10/04 3:10 p.m.•28 views

PoC-Deployer-System

PoC-Deployer-System !License: MIThttps://img.shields.io/b...

7.8CVSS6.2AI score0.00779EPSS
SaveExploits13
attackerkb
attackerkb
•added 2026/06/24 5:22 p.m.•25 views

CVE-2026-48725

Warp is an agentic development environment. From 0.2021.04.25.23.05.stable00 until 0.2026.05.06.15.42.stable01, Warp allows terminal output to request access to the local system clipboard. A malicious remote host, remote program, or other attacker-controlled terminal output source can trigger...

8.1CVSS5.9AI score0.00378EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/24 5:22 p.m.•54 views

CVE-2026-48725 Warp may allow terminal output to access the local clipboard through OSC 52

Warp is an agentic development environment. From 0.2021.04.25.23.05.stable00 until 0.2026.05.06.15.42.stable01, Warp allows terminal output to request access to the local system clipboard. A malicious remote host, remote program, or other attacker-controlled terminal output source can trigger...

8.1CVSS0.00378EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/10 9:04 p.m.•22 views

CVE-2026-49957

Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within remoteterminalworkspacecandidate...

7.7CVSS5.5AI score0.00505EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/09 6:31 p.m.•26 views

EUVD-2026-35704

Hermes WebUI before version 0.51.269 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within remoteterminalworkspacecandidate...

7.7CVSS5.5AI score0.00505EPSS
SaveExploits0References6
NVD
NVD
•added 2026/06/09 5:17 p.m.•22 views

CVE-2026-49957

Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within remoteterminalworkspacecandidate...

7.7CVSS0.00505EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/09 4:25 p.m.•38 views

CVE-2026-49957 Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py

Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within remoteterminalworkspacecandidate...

7.7CVSS5.9AI score0.00505EPSS
SaveExploits0References5
OSV
OSV
•added 2026/06/09 4:25 p.m.•22 views

CVE-2026-49957 Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py

Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within remoteterminalworkspacecandidate...

6.3CVSS6AI score
SaveExploits0References8
CVE
CVE
•added 2026/06/09 4:25 p.m.•51 views

CVE-2026-49957

CVE-2026-49957 : Hermes WebUI prior to 0.51.269 contains a workspace boundary bypass. An authenticated attacker can exploit an early return in the SSH/remote terminal profile workspace resolution logic (in _remote_terminal_workspace_candidate()) by configuring a remote terminal working directory ...

7.7CVSS5.9AI score0.00505EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•37 views

Hermes Web UI 路径遍历漏洞

Hermes Web UI is a lightweight, dark-themed web interface developed by Nathan Esquenazi. Versions of Hermes Web UI prior to 0.51.269 contained a path traversal vulnerability. This vulnerability stemmed from an issue with bypassing workspace boundaries, which could allow authentication attackers t...

7.7CVSS5.4AI score0.00505EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•4 views

CVE-2026-49957: Improper Limitation of a Pathname to a Restricted Directory

Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within remoteterminalworkspacecandidate...

7.7CVSS5.9AI score0.00505EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:24 p.m.•22 views

CVE-2026-8479

IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode BCI is...

6.9CVSS5.4AI score0.00247EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:18 p.m.•28 views

CVE-2026-45037

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.232, Tabby's terminal linkifier passes any detected URI directly to the operating system's protocol handler without validating the protocol scheme. This allows a malicious SSH or Telnet server to send crafted termina...

7.1CVSS5.6AI score0.00236EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/28 3:32 p.m.•27 views

EUVD-2026-32928

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

9.8CVSS5.8AI score0.00535EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/26 11:54 a.m.•49 views

EUVD-2026-31814

IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode BCI is...

6.9CVSS5.8AI score0.00247EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/17 7:34 p.m.•14 views

CVE-2026-32648 Anviz Products Missing Authorization

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details e.g., SSH/RTTY status, assisting attackers in reconnaissance against the device...

5.3CVSS5.8AI score0.00418EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/17 7:34 p.m.•74 views

CVE-2026-32648

Affected products: Anviz CX2 Lite and CX7. The CVE-2026-32648 vulnerability allows unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), aiding reconnaissance against the device. The available sources (NVD/NVD-based entries and ENISA EUVD) confirm the issue bu...

5.3CVSS5.8AI score0.00418EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder