CVE-2026-104894: Authorization Bypass Through User-Controlled Key

Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that they belong to the caller's workspace. An authenticated user can link issues from any workspace to modules in their own workspace. This issue is fixed ...

Cartero

Cartero Cartero现在是一个Go CLI，内置无需配置的工作区数据库，取代了旧版依赖MongoDB的运行时。 当前实现提供： 由Cobra和Lip Gloss驱动的精美终端体验 通过cartero serve运行的本地管理Web UI和安全测试页面 默认安全的战役验证和预览命令 位于.cartero/cartero.sqlite的嵌入式SQLite工作区存储 用于模板种子、克隆导入、受众同步、分析导出和交互记录的第一方插件 从CSV、JSON、SARIF和JSONL导入规范化发现 单向旧版Mongo导出迁移到当前工作区 单元测试、CLI测试和一致性测试，带有冒烟测试工作流...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access 和 Identity Manager 通过 SSTI 实现远程代码执行。 CVE-2022-22954 - PoC SSTI 使用方法： CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

CVE-2022-22954-POC

CVE-2022-22954-POC VMware Workspace ONE Access（以前称为VMware Identity Manager）旨在通过多因素身份验证、条件访问和单点登录，让您的员工更快地访问SaaS、Web和本机移动应用程序。 近日VMware官网发布了VMware Workspace ONE Access存在多个漏洞： 其中漏洞编号CVE-2022-22954，CVSS评分为9.8，危害等级为严重。影响版本如下： VMware Workspace ONE Access Appliance （版本号：20.10.0.0 ，20.10.0.1 ，21.08.0.0...

CVE-2021-36808

CVE-2021-36808 本地攻击者可通过竞争条件绕过 Sophos Secure Workspace for Android 9.7.3115 之前版本的应用密码。 安全公告： https://www.sophos.com/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypass 详细分析： https://ctulhu.me/posts/sophos-secure-workspace-app-password-bypass/...

CVE-2026-105137

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

EUVD-2026-92085

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

CVE-2026-105137 Laradock Build Process Dockerfile code download

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

CVE-2026-105137 Laradock Build Process Dockerfile code download

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

CVE-2026-105137

A vulnerability exists in Laradock (versions up to 20.4 ) within the Build Process component. Specifically, an unknown function in the workspace/Dockerfile allows for the download of code without integrity checks . This flaw can be exploited remotely with high complexity, and public exploit code ...

VMWare Workspace ONE UEM - Server-Side Request Forgery

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain a server-side request forgery vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without...

CVE-2026-105137: Download of Code Without Integrity Check

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

PT-2026-104616

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)

Security Advisory — SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths Workspace Boundary Bypass | Field | Value | |---|---| | Disclosed by | joysinleung [email protected] | | Report date | 2026-08-13 | | Product | SiYuan 思源笔记 — siyuan-note/siyuan | | Go module |...

GHSA-P23F-CM6Q-2QP8 SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)

Security Advisory — SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths Workspace Boundary Bypass | Field | Value | |---|---| | Disclosed by | joysinleung [email protected] | | Report date | 2026-08-13 | | Product | SiYuan 思源笔记 — siyuan-note/siyuan | | Go module |...

cve-2025-59532-poc

CVE-2025-59532 Docker 环境 一个基于 Docker 的研究环境，用于分析 CVE-2025-59532（OpenAI Codex CLI 中的路径遍历漏洞），该漏洞允许在预期工作区沙箱之外写入任意文件。 属于卡内基梅隆大学 2025 年秋季课程：18-739 黑客与进攻安全 快速开始 克隆仓库 首先，克隆此仓库： git clone https://github.com/jjagielo/18739-CVE-Exploration.git cd 18739-CVE-Exploration 或者使用 SSH： git clone...

CVE-2023-32749-PoC

CVE-2023-32749 | Pydio Cells 未授权角色分配 针对影响 Pydio Cells 4.1.2 及更早版本的 CVE-2023-32749 的利用程序。低权限的已认证用户可以创建一个具有所有角色分配的新外部用户，从而获得对该实例中所有单元格和非个人工作区的访问权限。 受影响版本 Pydio Cells 4.1.2 及更早版本 已在 4.2.0、4.1.3、3.0.12 中修复 依赖 pip install requests 使用方法 从已认证会话中获取一个 Bearer token（开发者工具 网络 任意 /a/ 请求 授权头），然后运行： python3...

EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents

Workspace agents combine large language models with execution harnesses to perform stateful, multi-step tasks that access or modify external resources. Existing benchmarks leave gaps in executable coverage of their runtime security risks, while evolving model capabilities, harnesses, tools, and...

CVE-2026-51873

Devika v1.0 is vulnerable to Directory Traversal in the Coder.savecodetoproject function, which allows attackers to write files outside the intended project workspace...

CVE-2026-46711

Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each sm-ws- Fly Machine exposes endpoints /health, /file/, /archive/ without any authentication or origin check. Any ho...