26731 matches found
CVE-2024-49369
CVE-2024-49369 Overview This vulnerability leverages the Icinga JSON-RPC protocol to exploit monitored nodes running Icinga agents. By impersonating a Master/Satellite instance, attackers can potentially take over agents, execute arbitrary commands, or gain sensitive information. How to Use...
CVE-2021-43326_Exploit
CVE-2021-43326 Exploit Automox Windows Agent Privilege Escalation Exploit Lacework Labs Blog Post https://www.lacework.com/blog/cve-2021-43326/ Automox Community Post...
pigeon
Pigeon Your agent spawned a sub-agent and handed it the same API key. That sub-agent can now deploy to production, read the payments database, and merge to main. Pigeon stops that. You hand the child a Pigeon Pass : a narrowed, signed credential for what it may do, not a copy of everything you ca...
onecli
The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website Ā· Docs Ā· Discord Quick Start Cloud-hosted: onecli.sh Self-hosted git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setup Open...
moltis
Moltis ā A secure persistent personal agent server in Rust One binary ā sandboxed, secure, yours. Installation ā¢ Comparison ā¢ Architecture ā¢ Security ā¢ Features ā¢ How It Works ā¢ Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...
yoloai
yoloAI Sandboxed runner for AI coding agents. No permission fatigue, no credentials in the box, no changes to your project until you approve them. AI coding agents work best with the guardrails off, and that's a terrible way to run them on your real machine. yoloAI gives the agent a disposable...
CVE-2024-0670
CVE-2024-0670 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2024-0670 vulnerability, affecting the CheckMK Agent on Windows systems. The vulnerability occurs when the CheckMK Agent creates and executes temporary files in the C:\Windows\Temp directory. An attacker can abu...
CVE-2020-5148
CVE-2020-5148 Forced Authentication in the SonicWall UTM SSO Agent The SonicWall SSO Agent identifies the user behind a given IP address by probing that workstation with NetAPI the default or WMI. It does not validate the workstation before initiating the NTLM authentication, and it continues...
yolo-cage
yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...
FluentD-TD-agent-Exploit-CVE-2020-28169
FluentD-TD-agent-WindowsExploit V4.0.1 CVE-2020-28169 Insecure Folder permission that leads to privilege escalation Download URL: https://td-agent-package-browser.herokuapp.com/4/windows...
TriSuElla-AIDLCA-Framework
š± TriSuElla-AIDLCA Framework One Unified Continuous Trust, Risk, Security & Compliance Layer for Conventional Systems, Generative AI & Autonomous Multi-Agent Workloads Software Version : 3.4.0 | Framework Version : 3.4.0 | Status : Institutionalized Production-Ready, DevSecOps-Ready & CI-Verified...
red-clippy
Red Clippy Your agent tests. Red Clippy keeps the record. Open-source pentest management built to be operated by an AI agent. Connect it to Claude Code over MCP and it runs the engagement alongside you: scope and assets, recon observations, methodology coverage, and findings with CVSS and evidenc...
CVE-2026-111926
Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...
EUVD-2026-103293
Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...
kunglao-agent
kunglao-agent An autonomous reverse-engineering agent that runs for hours unattended, verifies every conclusion independently, and converges only when every answer survives a mechanical oracle verdict. š§ plans its own route Ā· š¬ every claim machine-checked Ā· āļø blind verification on everything Ā· š...
log4j-jndi-be-gone
log4j-jndi-be-gone A Byte Buddy Java agent-based fix for CVE-2021-44228, the log4j 2.x "JNDI LDAP" vulnerability. It does three things: Disables the internal method handler for jndi: format strings "lookups". Logs a message to System.err i.e stderr indicating that a log4j JNDI attempt has been ma...
CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit
CVE-2024-0670 ā CheckMK Agent Local Privilege Escalation PoC This repository contains a simple and clean proof-of-concept for CVE-2024-0670, a local privilege escalation vulnerability in the CheckMK Windows Agent. A low-privileged user can gain SYSTEM privileges by abusing writable temp file path...
CVE-2024-43044-jenkins-creds
Intro This is an exploit for CVE-2024-43044, an arbitrary file read that allows an agent to fetch files from the controller. The exploit will use the vulnerability to read credentials.xml file and get secret keys to decrypt it. Initial code : https://github.com/convisolabs/CVE-2024-43044-jenkins...
CVE-2024-9950-PoC
CVE-2024-9950-PoC Forescout SecureConnector = 11.3.07 Detail My Blog Info Vulnerability: Creation of Temporary Script in Directory with Insecure Permissions Severity: Medium to High Vector: Local Windows OS machine Attack Complexity: Low Privileges Required: Low Categories: Local Privilege...
LeitWacht
GitLab Runner Leitwacht Network egress enforcement for GitLab Runner CI/CD containers. Leitwacht prevents supply chain attacks from exfiltrating secrets by controlling what each job container can access on the network. How It Works Leitwacht is a standalone agent that runs alongside GitLab Runner...