CVE-2020-14368

CSWSH-THEIA-CVE-2020-14368 Цель отчета: развертывание Eclipse CHE, доступное на che.openshift.io Тип уязвимости: межсайтовый перехват веб-сокетов Дата обнаружения: 2020-04-08 Автор: Robin Duda codingchili@github Краткое описание Конечная точка веб-сокета /services в Eclipse CHE и Theia уязвима к...

CVE2_Jenkins_RCE

Jenkins CLI Websocket 하이재킹 - PoC CVE-2024-23898에 대한 개념 증명 교차 사이트 WebSocket 하이재킹 익스플로잇입니다. 이는 Jenkins 버전 2.217-2.441에 영향을 미치는 취약점입니다. 이 익스플로잇은 Jenkins CLI를 대상으로 하며, 이를 통해 원격으로 Jenkins 제어 서버에 접근하고 명령을 실행할 수 있습니다. 이 익스플로잇을 통해 원격 공격자는 관리자가 대상 Jenkins 제어 서버에 로그인한 상태에서 악성 사이트를 방문하도록 속임을 당할 경우, Jenkins ...

aapanel-ws-bypass

aaPanel: Вендоры не всегда исправляют вещи должным образом Неполное исправление CVE-2021-37840 по-прежнему оставляет 3,6 млн серверов уязвимыми для RCE с правами root спустя 5 лет Обнаружено: EON Security CVE: Ожидает присвоения CVSS: 8.8 Высокий — AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Затронуто:...

CVE-2025-1094-Exploit

CVE-2025-1094: SQL-инъекция до RCE через WebSocket 🚀 Этот репозиторий содержит доказательство концепции PoC эксплойта для CVE-2025-1094 , уязвимости в PostgreSQL, которая позволяет SQL-инъекции SQLi перерасти в удаленное выполнение кода RCE через захват WebSocket. Обзор Этот эксплойт использует...

GHSA-3CC2-H3V6-RQPQ SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass

High Package gomod github.com/siyuan-note/siyuan/kernel Affected versions 3.7.3 Patched versions none yet — leave blank until a fix is released Description Summary /ws/network/proxy is an admin-only WebSocket forward-proxy endpoint target URL and headers fully attacker-specifiable via query...

SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass

High Package gomod github.com/siyuan-note/siyuan/kernel Affected versions 3.7.3 Patched versions none yet — leave blank until a fix is released Description Summary /ws/network/proxy is an admin-only WebSocket forward-proxy endpoint target URL and headers fully attacker-specifiable via query...

EUVD-2026-60085

SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint /ws/network/proxy via explicit CheckOrigin: true bypass...

agentbox

🛡️ AgentBox AI 에이전트를 위한 오픈소스 샌드박스 런타임 AI 에이전트를 안심하고 실행하세요. 모든 에이전트는 자체 권한 범위, 자격 증명 금고, 감사 추적, 킬 스위치를 갖습니다. AgentBox가 존재하는 이유 2026년 1월 27일, CVE-2026-25253 은 에이전틱 AI 시스템에 부여된 최초의 CVE가 되었습니다. OpenClaw의 치명적인 WebSocket 하이재킹 취약점으로 인해 노출된 모든 인스턴스 — localhost에만 바인딩된 인스턴스까지 포함 — 에 대해 원클릭 원격 코드 실행이 가능해졌습니다...

CVE-2026-25253-research

CVE-2026-25253 개념 증명PoC Cross-Site WebSocket Hijacking을 통한 OpenClaw 원클릭 RCE. 면책 조항: 이 코드는 승인된 보안 연구 및 교육 목적으로만 제공됩니다. 명시적인 서면 허가 없이 시스템에 대해 이 코드를 사용하는 것은 불법이며 비윤리적입니다. 저자는 오용에 대해 어떠한 책임도 지지 않습니다. 블로그 이 취약점의 소스 코드 수준 분석과 이 PoC가 어떻게 구축되었는지에 대한 자세한 내용은 상세 분석을 읽어보세요. 사전 요구 사항 Node.js v18 이상 피해자 머신에서...

openclaw-vuln-report

OpenClaw 취약점 분석 보고서 CVE-2026-25253 보안 취약점 한국어 해설 온라인 열람 GitHub Pages: https://joseph19820124.github.io/openclaw-vuln-report/ 취약점 요약 CVE : CVE-2026-25253 점수 : CVSS 8.8 고위험 유형 : 교차 사이트 WebSocket 하이재킹 영향 : 원클릭으로 원격 코드 실행 가능 출처 원문: The Hacker News...

CVE-2025-68930

🔍 Анализ CVE-2025-68930: Уязвимость перехвата WebSocket в Traccar CVE-2025-68930 раскрывает критическую уязвимость межсайтового перехвата WebSocket CSWSH в Traccar , системе отслеживания GPS с открытым исходным кодом. Ниже приведены ключевые детали: 🛡️ Детали уязвимости Затронутая конечная точка :...

Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

Summary The Cline Hub dashboard server @cline/cline-hub, launched via the cline dashboard CLI command, accepts WebSocket connections on the /browser endpoint without validating the HTTP Origin header. When ROOMSECRET is not set—the default for local 127.0.0.1 binds—isAuthorizedBrowserRequest...

Origin Validation Error

Overview cline is an Autonomous coding agent CLI - capable of creating/editing files, running commands, using the browser, and more Affected versions of this package are vulnerable to Origin Validation Error via missing WebSocket host and origin validation in the cline-hub dashboard server...

rabbitmq-server: RabbitMQ: Cross-Site WebSocket Hijacking via missing Origin header validation

A flaw was found in RabbitMQ's Web-MQTT and Web-STOMP handlers. These handlers do not properly validate the Origin header during a WebSocket upgrade. When specific non-default configurations are enabled, such as usehttpauth=true for Web-STOMP or sslcertlogin=true for both plugins, an attacker can...

CVE-2026-71416

Headroom is a WebSocket proxy that compresses data before it reaches a large language model. Prior to version 0.35.0 , its WebSocket server fails to validate the Origin header of incoming client WebSocket requests before forwarding them to the upstream server. This allows a Cross-Site WebSocket H...

CVE-2026-71416 Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to...

CVE-2026-71416 Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to...

CVE-2026-71416 Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to...

CVE-2026-85183

Taipy (a Python web application framework) through version 4.1.1 misconfigures its socket.io server with a wildcard CORS origin and the credential flag enabled. This allows any web page to establish credentialed WebSocket connections to a victim's Taipy application, enabling attackers to open soc...

CVE-2026-85183 Taipy through 4.1.1 Cross-Site WebSocket Hijacking via Wildcard socket.io CORS

Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications. Attackers can open socket.io sessions from arbitrary domains and invoke state variable modifications and actio...