Bifrost

Bifrost 命令与控制 什么是 Bifrost？ Bifrost 是一个开源的 Discord 机器人 ，充当 命令与控制 C2。此 C2 使用 Discord API 进行客户端与服务器之间的通信。 该 C2 使用 Python 开发，具有多种用于后期利用的功能。 Bifrost 的工作原理？ 如前所述，Bifrost 本质上是一个 Discord 机器人，它接收 Discord 用户的命令并执行预定义的任务。 因此，对于你要“感染”的每个客户端，你都将发送此机器人的副本，它将使用 Discord 向你响应。这允许你隐藏在 Discord...

bifrost

Bifrost \ /' | | | , | '| || , '/'\ /',| | | | || | | | , | | /' /'/ Usage: ./bifrost -action dump | list | askhash | describe | asktgt | asktgs | s4u | ptt | remove For dump action: -source tickets | keytab for keytab, optional -path to specify a keytab for tickets, optional -name to specify a...

bifrost

Bifrost Servidor proxy HTTP/HTTPS/SOCKS5 de alto rendimiento Language: 中文 | English · Documentation site Bifrost es un servidor proxy de alto rendimiento y compatible con IA escrito en Rust, inspirado en Whistle. Ofrece interceptación de solicitudes, modificación de reglas, interceptación TLS,...

CVE_2022_38181_Raven

FireTV 第二代 Cube 的 CVE-2022-38181 漏洞利用 这是安全研究员 Man Yue Mo 的 Pixel 6 POC 针对 CVE202238181 的一个分支。请在此阅读他对该漏洞的详细分析文章 （英文）。已对代码进行修改以适应 FireOS 的 32 位用户空间，以及第二代 Cube 较旧的 Bifrost 驱动 r16p0 和 Linux 内核 4.9.113 版本。该 POC 利用 ARM Mali 内核驱动中的一个漏洞来获得任意内核代码执行，进而禁用 SELinux 并获取 root 权限。 我使用以下命令通过 ndk-21 中的 clang 进行编译：...

CVE-2026-90898

Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.authconfig.isenabled=false. Auth off means every caller is a local admin...

CVE-2026-90898 Bifrost unauthenticated remote code execution via MCP stdio client registration

Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.authconfig.isenabled=false. Auth off means every caller is a local admin...

EUVD-2026-77357

Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.authconfig.isenabled=false. Auth off means every caller is a local admin...

CVE-2026-90898

Bifrost (by maximhq) is vulnerable to unauthenticated remote code execution through its MCP stdio client registration endpoint. When a stdio client is registered via POST /api/mcp/client, Bifrost immediately spawns the specified command in the gateway—no MCP handshake required. By default, authen...

CVE-2026-90898 Bifrost unauthenticated remote code execution via MCP stdio client registration

Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.authconfig.isenabled=false. Auth off means every caller is a local admin...

CVE-2026-90898 Bifrost unauthenticated remote code execution via MCP stdio client registration

Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.authconfig.isenabled=false. Auth off means every caller is a local admin...

PT-2026-91161

Name of the Vulnerable Software and Affected Versions Bifrost HTTP transport versions prior to 2.1.0 Description Bifrost allows the registration of MCP clients through its management API, where a stdio client consists of a command and arguments. The software starts the program in the gateway...

CVE-2026-90898: Missing Authentication for Critical Function

Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.authconfig.isenabled=false. Auth off means every caller is a local admin...

Exploit for Out-of-bounds Write in Arm Bifrost_Gpu_Kernel_Driver

CVE-2021-28664-PoC Mali kbase GPU driver UAF CVE-2021-2866...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

AI-assisted project. This research, exploit development, a...

SUSE CVE-2026-55245

Bifrost is an enterprise AI gateway for routing requests to model providers. Prior to 1.5.17, the isPublicIP function in core/providers/utils/fetch.go, reached through FetchAndEncodeURL for Bedrock and Vertex image or document URLs, classifies Carrier-Grade NAT 100.64.0.0/10, IPv6 6to4 2002::/16,...

CVE-2026-86840

The vtoken-minting and slpx pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered channelid when minting tokens without verifying that the caller is authorized to mint on behalf of that channel. Th...

CVE-2026-86840 Bifrost Unauthorized Channel Commission Attribution Allows Commission Diversion

The vtoken-minting and slpx pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered channelid when minting tokens without verifying that the caller is authorized to mint on behalf of that channel. Th...

CVE-2026-86840 Bifrost Unauthorized Channel Commission Attribution Allows Commission Diversion

The vtoken-minting and slpx pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered channelid when minting tokens without verifying that the caller is authorized to mint on behalf of that channel. Th...

CVE-2026-86840

The Bifrost blockchain contains an improper authorization vulnerability within the vtoken-minting and slpx pallets. The root cause is a failure to verify if a caller is authorized to mint tokens on behalf of a specific channel when a signed account supplies a registered channel_id. This allows an...

EUVD-2026-72876

The vtoken-minting and slpx pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered channelid when minting tokens without verifying that the caller is authorized to mint on behalf of that channel. Th...