agentbox

🛡️ AgentBox 面向 AI 代理的开源沙箱运行时 放心运行 AI 代理。每个代理都拥有自己的权限范围、凭据保险库、审计追踪和紧急终止开关。 AgentBox 存在的原因 2026 年 1 月 27 日，CVE-2026-25253 成为首个被分配给智能体 AI 系统的 CVE。OpenClaw 中的一个严重 WebSocket 劫持漏洞使得攻击者能够对任何暴露的实例（包括仅绑定到 localhost 的实例）进行一键远程代码执行。 同一周，ClawHavoc 活动 将 341+ 个恶意技能渗透进了 OpenClaw 的市场。从 ClawHub 安装的每个技能都以与 OpenClaw...

openclaw-vuln-report

Informe de Análisis de Vulnerabilidad de OpenClaw Interpretación en chino de la vulnerabilidad de seguridad CVE-2026-25253 Lectura en línea GitHub Pages: https://joseph19820124.github.io/openclaw-vuln-report/ Resumen de la vulnerabilidad CVE : CVE-2026-25253 Puntuación : CVSS 8.8 Alta Tipo :...

CVE-2020-14368

CSWSH-THEIA-CVE-2020-14368 Objetivo del informe: Implementación de Eclipse CHE disponible en che.openshift.io Tipo de vulnerabilidad: Cross-site websocket hijack Fecha de descubrimiento: 2020-04-08 Autor: Robin Duda codingchili@github Resumen El endpoint websocket /services en Eclipse CHE adn The...

CVE2_Jenkins_RCE

Jenkins CLI WebSocket ハイジャック - PoC CVE-2024-23898（Jenkins バージョン 2.217-2.441 に影響を与える脆弱性）に対する、クロスサイト WebSocket ハイジャックの概念実証（PoC）エクスプロイトです。 このエクスプロイトは、Jenkins 制御サーバーにリモートアクセスしてコマンドを発行するために使用できる Jenkins CLI を標的としています。このエクスプロイトにより、リモート攻撃者は、管理者がターゲットの Jenkins 制御サーバーにログインした状態で悪意のあるサイトを訪問するよう誘導された場合、Jenki...

CVE-2026-25253-research

CVE-2026-25253 概念验证 通过跨站 WebSocket 劫持在 OpenClaw 上实现一键远程代码执行（RCE）。 免责声明： 此代码仅供授权的安全研究和教育目的使用。在未经明确书面许可的情况下，将此代码用于针对任何系统属于违法行为且不道德。作者对滥用行为不承担任何责任。 博客 阅读详细分析，了解该漏洞的源码级剖析以及此 PoC 的构建过程。 前提条件 Node.js（v18 或更高版本） 在受害者机器上运行着启用了 Gateway 的 OpenClaw 实例（默认：localhost:18789） 受害者的浏览器中必须存储有有效的认证令牌（即他们之前使用过 Contro...

CVE-2025-1094-Exploit

CVE-2025-1094: WebSocket経由のSQLインジェクションからRCEへ 🚀 このリポジトリには、CVE-2025-1094 （PostgreSQLの脆弱性）の概念実証（PoC）エクスプロイトが含まれています。この脆弱性により、WebSocketハイジャッキングを通じてSQLインジェクション（SQLi）攻撃をリモートコード実行（RCE）にエスカレーションできます。 概要...

aapanel-ws-bypass

aaPanel：供应商并不总是能正确修复问题 针对 CVE-2021-37840 的不完整修复在 5 年后仍使 360 万台服务器面临 root RCE 风险 发现者： EON Security CVE： 待分配 CVSS： 8.8（高危）— AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 受影响版本： aaPanel 6.8.12 至 7.65.0（自 2021 年修复以来的所有版本） 安装基数： 超过 360 万台服务器 简介 2021 年，aaPanel（一款运行在超过 360 万台服务器上的免费托管控制面板）披露了一个跨站 WebSocket...

CVE-2025-68930

🔍 CVE-2025-68930 分析：Traccar 中的 WebSocket 劫持漏洞 CVE-2025-68930 暴露了 Traccar （开源 GPS 跟踪系统）中的一个 关键跨站 WebSocket 劫持漏洞（CSWSH） 。以下是关键详情： 🛡️ 漏洞详情 受影响端点 ：/api/socket 根本原因 ：WebSocket 握手期间 未对Origin 标头进行验证。 利用机制 ： 1. 攻击者诱骗已认证用户访问恶意网站。 2. 恶意网站利用用户的活跃会话（JSESSIONID）与 Traccar 服务器建立 WebSocket 连接。 3. 服务器 接受连接...

Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)

Summary The cross-site WebSocket hijacking fix was reimplemented as an origin check gated on a raw-URI prefix test, but Go's ServeMux routes on the percent-decoded path, so requesting /%61pi/events reaches the WebSocket handler while skipping the only origin control, and the upgrader itself accep...

CVE-2026-74802

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

CVE-2026-74802 SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

CVE-2026-74802

SiYuan versions before 3.7.4 set the WebSocket CheckOrigin handler to unconditionally return true on the admin-only /ws/network/proxy endpoint, allowing cross-site WebSocket hijacking. A malicious webpage can make the victim's SiYuan kernel proxy arbitrary network traffic, enabling authenticated ...

EUVD-2026-60085

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

CVE-2026-66420

MeshCentral 1.1.21 is affected by a cross-site WebSocket hijacking vulnerability caused by an unconditional early return in CheckWebServerOriginName() in webserver.js when using self-signed certificates. This allows unauthenticated remote attackers to initiate cross-origin WebSocket connections t...

CVE-2026-66420 MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName function within webserver.js when...

CVE-2026-66420 MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName function within webserver.js when...

CVE-2026-66420

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName function within webserver.js when...

CVE-2026-66420 MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName function within webserver.js when...

CVE-2026-55883 Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream

Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.24.0 through 0.37.3, the Tilt HUD WebSocket at /ws/view is gated by a CSRF token, but the token is served by the unauthenticated /api/websockettoken endpoint and the upgrader accepts clients that omit an Origin...

PYSEC-2026-1223 Bokeh server applications have Incomplete Origin Validation in WebSockets

This vulnerability allows for Cross-Site WebSocket Hijacking CSWSH of a deployed Bokeh server instance. Scope This vulnerability is only relevant to deployed Bokeh server instances. There is no impact on static HTML output, standalone embedded plots, or Jupyter notebook usage. This vulnerability...