Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

SummaryDecepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

SummaryDecepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...

CVE-2026-1357

CVE-2026-1357 Entorno de laboratorio para CVE-2026-1357 1. Construir el entorno sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

CVE-2024-12986

CVE-2024-12986 扫描器与漏洞利用工具 本仓库包含针对 CVE-2024-12986 漏洞的扫描器与漏洞利用工具。该漏洞是 DrayTek 网关设备 apmcfgupptim 端点中的一个命令注入漏洞 。攻击者可利用该漏洞在受影响设备上执行任意命令，可能导致系统完全沦陷。 漏洞概述 该漏洞存在于 DrayTek 网关设备的 apmcfgupptim 端点中。通过构造恶意 HTTP 请求，攻击者可以向 session 参数注入任意命令，从而在目标设备上实现命令执行。 更多详情，请参阅原始披露： Command Injection in apmcfgupptim endpoint...

CVE-2026-96659

A flaw in Foreman allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. This vulnerability can expose sensitive data, including host root passwords . Additionally, if Safemode protections a...

EUVD-2026-90920

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...

Ashwesker-CVE-2025-60021

🛑 CVE-2025-60021 — Apache bRPC 远程命令注入 📌 概述 CVE-2025-60021 是存在于 Apache bRPC 版本 1.15.0 之前 的 堆分析器内置服务 /pprof/heap 中的一个严重远程命令注入漏洞 ，允许未经身份验证的攻击者执行任意操作系统命令。 NVD 🔓 漏洞详情 属性| 信息 ---|--- 名称/ID| CVE-2025-60021 产品| Apache bRPC（所有平台） 影响版本| ❗攻击者只需操控此分析参数即可远程注入命令。 🚨 严重性与风险 🔥 严重性评级: 严重 📊 CVSS v3.1 基础评分: 9.8 / 10...

foreman: Excessive Permissions for Viewer Role on Preview

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...

cve-2025-66478_rce_vulnerable

使用 shadcn/ui 的现代博客 一个使用 Next.js 16、React 19、shadcn/ui 和 Tailwind CSS 构建的现代优雅博客。 重要提示： Next JS 漏洞项目 ，仅为教育、测试和利用目的而创建，不建议在生产环境中安装，仅限本地或受控环境使用 PoC POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113...

Sudo-Vulnerability-Exploit-CVE-2019-14287

Sudo漏洞利用——CVE-2019-14287 Sudo被发现不可靠，它是几乎任何基于Unix和Linux的操作系统中最重要、最强大且最常用的实用程序之一，作为一个简单的命令存在。一个伪安全策略绕过缺陷，允许恶意用户或应用程序在目标Linux设备上执行任意命令。该错误需要非标准设置才能触发。换句话说，Linux机器本身并不会自然地被破坏。错误的用户只应在Linux操作系统上执行命令时使用“Super User Do”命令，通过将用户ID定义为“-1”来作为命令源执行1。这种不安全性需要按CVE-2019-14287中演示的结构化设置，但也为未授权用户打开了大门。在命令行中使用 -u -...

CVE-2025-53547-POC

CVE-2025-53547 POC 这是 CVE-2025-53547 的概念验证 Chart.lock 将测试文件链接到 /tmp/1.txt /tmp/1.txt 注入一个创建 /tmp/2.txt 的命令 在实际产品环境中，您可以更改 Chart.lock 链接文件以注入任何您想要的命令，例如： /root/.bashrc /root/.bashprofile /etc/profile ...... 或者任何可以运行 shell 脚本的文件。 然后更改 Chart.yaml 的依赖仓库 URL 参数以运行其他命令。 使用方法 helm = 3.18.3 首先运行 helm...

Rust_CVE-2025-55182

CVE-2025-55182 漏洞利用工具 （Rust版本） 项目概述 本项目是一个使用 Rust 语言开发的安全研究工具，针对 [email protected] 中存在的远程代码执行（RCE）漏洞。该漏洞允许攻击者通过构造恶意的 Server Action 请求，在未经身份验证的情况下在目标服务器上执行任意代码。 核心功能 工具提供了多种利用方式： 命令执行：通过 vm 模块或 childprocess 模块在目标服务器上执行任意 Shell 命令 文件读取：利用 fs 模块读取服务器上的敏感文件 JavaScript 执行：直接在服务器端执行任意 JavaScript 代...

cve-2021-4034

CVE-2021-4034 此工具用于 pkexec 单命令执行 POC whoami test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 bytes from 8.8.8.8: icmpseq=1 ttl=114 time=61.4 ms 64 bytes fro...

CVE-2024-55963

CVE‑2024‑55963 Appsmith RCE PoC PoC exploit for CVE‑2024‑55963 that runs arbitrary commands or spawns reverse shell on vulnerable Appsmith instances. It automatically handles both modern servers with the environmentId feature and much older “legacy” builds that pre‑date it, so you can use one...

USN-8857-1: KCoreAddons vulnerability

It was discovered that KCoreAddons incorrectly handled shell argument quoting in KShell::quoteArgs. The parsing did not adequately handle shell metacharacters, which could lead to a shell escape. An attacker could possibly use this issue to execute arbitrary commands in applications that relied o...

Blackash-CVE-2025-12762

🔐 CVE-2025-12762 — pgAdmin 4 中的严重 RCE 漏洞 🚨 问题是什么？ pgAdmin 4 版本 ≤ 9.9 中存在一个远程代码执行（RCE）漏洞。 当 pgAdmin 以 服务器模式运行并在还原过程中处理 PLAIN 格式的 SQL 转储 时，攻击者可以在主机上执行任意命令 。 ⚙️ 技术详解 📡 攻击向量 基于网络 — 可在远程利用 🌍 低复杂度 — 易于触发 🧩 所需权限低 — 有限的用户权限即可 🔑 无需用户交互 — 一旦触发，无需任何人点击任何内容 🙅‍♂️ 影响范围：已改变 — 危害可能扩散到易受攻击的模块之外 🔄 🧨 影响 机密性：高 —...

CVE-2026-76146

An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...

Rocky Linux 9 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc (crlsa-2026_19224)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619224 advisory. vim: arbitrary command execution via modeline sandbox bypass CVE-2026-34982 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc (crlsa-2026_11509)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202611509 advisory. vim: arbitrary command execution via modeline sandbox bypass CVE-2026-34982 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc (crlsa-2026_11510)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202611510 advisory. vim: arbitrary command execution via modeline sandbox bypass CVE-2026-34982 Tenable has extracted the preceding description block directly from the CIQ security...