SharpSCOM

SharpSCOM Una herramienta C para interactuar con Microsoft System Center Operations Manager SCOM. Esta herramienta ha sido probada contra la versión 10.22.10118.0 del servidor SCOM. La integración SSPI se proporciona a través de la librería nsspi de Kevin Thompson antiduh, publicada bajo la...

CVE-2024-28741-northstar-agent-rce-poc

NorthStar C2代理RCE via 存储型XSS CVE-2024-28741的代理RCE PoC，NorthStar C2中的一个存储型XSS漏洞。 此漏洞利用通过向团队服务器发送多个恶意代理注册请求，在日志网页中逐步构建一个可运行的JavaScript负载。该XSS可用于在NorthStar C2代理上执行命令。 完整说明：https://blog.chebuya.com/posts/discovering-cve-2024-28741-remote-code-execution-on-northstar-c2-agents-via-pre-auth-stored-xss/...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | WebSocketを介した自動リバースシェルエクスプロイト このプロジェクトは、脆弱なWebSocketベースのサービスを悪用するためのPythonベースの概念実証（PoC）スクリプトを提供します。スクリプトは、エージェント登録、WebSocketペイロード配信、およびリバースシェルを確立するためのリモートコマンド実行を自動化します。 特徴 ターゲットサービスにエージェントを登録します。 WebSocketを開き、ハンドシェイクと認証ペイロードを送信します。...

CVE-2026-63077

CVE-2026-63077 — JetBrains TeamCity 未认证远程代码执行漏洞 -red.svg 严重未认证远程代码执行漏洞（CVSS 9.8）— 已在野外被积极利用 本仓库包含针对 CVE-2026-63077 的完整可用概念验证（PoC）漏洞利用程序，这是 JetBrains TeamCity 中的一个严重反序列化漏洞，允许未认证攻击者在服务器上执行任意命令。 该漏洞利用程序通过 Agent 注册端点（/app/agents/v1/register）建立恶意代理会话，然后向 /app/agents/v1/commands/error 端点发送精心构造的...

EUVD-2026-83954

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

CVE-2026-52742 GoCD is vulnerable to historical server configuration API authorization bypass

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

CVE-2026-52742

GoCD (continuous delivery server) versions 12.3.1 through 26.1.0 are affected by an authorization bypass in legacy routes under /go/admin/restful/*. These routes expose the full historical server configuration to pipeline group administrators rather than restricting responses to only the groups t...

SUSE CVE-2026-72342

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration race mlx5ehvvhcastatscreate registers the stats agent through mlx5hvvhcaagentcreate. The helper publishes the agent in hvvhca-agentstype under agentslock and immediately schedules a...

Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation

Impact A vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate any other agent on the same server by injecting a forged agentid value into outgoing gRPC metadata. The server correctly verified the JWT token but then discarded the verified agent identity in fav...

CVE-2026-59795

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible...

CVE-2026-59795

CVE-2026-59795 affects JetBrains TeamCity prior to 2026.1.2. The vulnerability is a stored XSS via unauthenticated agent registration, enabling cross-site script execution under defined conditions. CVSSv3.1 base score 8.1 (HIGH) with network attack vector, low attack complexity, no privileges req...

EUVD-2026-42913

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible...

CVE-2026-59795: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible...

CVE-2026-55432 Coder's sub-agent app registration bypasses template port-sharing policy enforcement

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the CreateSubAgent RPC did not validate a requested app sharing level against the template's MaxPortSharingLevel before persisting workspace apps, letting a...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the CreateSubAgent process. An attacker can gain unauthorized access to workspace applications by registering sub-agent apps with a sharing level that exceeds the administrator's configured maximum, thereby...

SUSE CVE-2026-50141

Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate any other agent on the same server by injecting a forged agentid value into outgoing gRPC metadata. The server correctl...

CVE-2026-56077

CVE-2026-56077 concerns PraisonAI before 1.5.115, where an information disclosure vulnerability exists in the MultiAgentLedger component. The root cause is failure to enforce unique agent IDs during registration, enabling attackers to share ledger instances and access sensitive data including sys...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation via the agentid metadata in the gRPC communication process. An attacker can impersonate other agents on the same server by injecting a forged value into outgoing metadata, leading to unauthorized cross-tenant actions...

PT-2026-50808

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.5.115 Description An information disclosure issue exists in the MultiAgentLedger component. The system fails to enforce the uniqueness of agent IDs, allowing attackers to register agents with duplicate IDs. This...

Malicious code in gm-kilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a35ea8669a2b02f60117ecc483176741399084b0fbebf11900d0a89505d9fb package.json declares an install lifecycle script that runs bin/gm-kilo.js install. At install time, the script executes bun x gm-plugkit@latest spoo...