bleed

bleed bleed es una herramienta para probar servidores en busca de la vulnerabilidad 'Heartbleed' CVE-2014-0160. Uso $ bleed example.org Connecting... Sending Client Hello Waiting for Server Hello... Sending Heartbeat request Unexpected EOF receiving record header. Server closed connection. No...

CVE-2025-14847

MongoBleed PoC CVE-2025-14847 Divulgación ética y descargo de responsabilidad Esta herramienta se proporciona únicamente con fines educativos y para su uso en auditorías de seguridad autorizadas. El propósito de este PoC es ayudar a los administradores de sistemas y a los investigadores de...

Citrix-Bleed-Buffer-Overread-Demo

Citrix-Bleed-Buffer-Overread-Demo Este código aproxima funcionalmente la vulnerabilidad Citrix Bleed CVE-2023-4699 del manejo inadecuado del valor de retorno de snprintf en C...

CVE-2025-6543

CVE-2025-6543 Citrix Bleed 2 PoC...

overread

overread Simula el bug de sobrelectura CVE-2023-4966 Citrix Bleed Este es mi proyecto final para Harvard CS50 Cybersecurity 2023. Trata sobre un bug. Un bug pequeño, con consecuencias enormes y continuas. En esta presentación compartiré las "revelaciones sangrantes" de un diminuto error de un...

LockBit-Ransomware-Analysis

🔐 Análisis del ransomware LockBit – Explotación de Citrix Bleed 📌 Visión general Este proyecto presenta un análisis detallado de inteligencia de amenazas y respuesta a incidentes del ataque de ransomware LockBit de octubre de 2023 dirigido a Boeing. Los atacantes explotaron CVE-2023-4966 Citrix...

CVE-2023-4966

CVE-2023-4966 一个用于利用CVE-2023-4966 Citrix信息泄露漏洞（Bleed）的利用脚本 黑客已广泛利用此Citrix网关漏洞，本脚本支持并发，可对目标文件或单个目标进行利用 安装： git clone https://github.com/sanjai-AK47/CVE-2023-4966.git cd CVE-2023-4966 pip install -r requirements.txt python3 exploit.py -h 单目标利用： python3 exploit.py -d target.com -o output.txt 批量利用：...

CVE-2026-92615 Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed

A flaw was found in flightctl. The configureRepoHTTPSClient function in the device-render worker builds a per-repository tls.Config which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates and installs it into go-git's process-global client.Protocols m...

CVE-2026-92615 Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed

A flaw was found in flightctl. The configureRepoHTTPSClient function in the device-render worker builds a per-repository tls.Config which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates and installs it into go-git's process-global client.Protocols m...

CVE-2026-92615

flightctl 's configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify , a custom CA bundle, or tenant-supplied mTLS client certificates ) and installs it into go-git's process-global client.Protocols map via gitclient...

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 CVE-2025-5777 vulnerability to obtain initial access. "Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Remote Management and...

CVE-2026-43529

OpenClaw before 2026.4.10 contains a time-of-check-time-of-use vulnerability in the validateScriptFileForShellBleed function that allows local attackers to bypass workspace boundary checks. An attacker with workspace write access can race-condition swap the target file between validation and...

CVE-2026-43529 OpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validator

OpenClaw before 2026.4.10 contains a time-of-check-time-of-use vulnerability in the validateScriptFileForShellBleed function that allows local attackers to bypass workspace boundary checks. An attacker with workspace write access can race-condition swap the target file between validation and...

JLSEC-2026-419 When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's...

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure HTTP:// scheme and perform transfers with host...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the validateScriptFileForShellBleed function. An attacker can cause the preflight analysis to inspect a different file than the one tha...

EUVD-2026-18490

OpenClaw's complex interpreter pipelines could skip exec script preflight validation...

Incomplete List of Disallowed Inputs

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs through the validateScriptFileForShellBleed process. An attacker can execute unauthorized script content by crafting piped, substituted, or subshell...

Duplicate Advisory: OpenClaw's complex interpreter pipelines could skip exec script preflight validation

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fvx6-pj3r-5q4q. This link is maintained to preserve external references. Original Description OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protecti...

GHSA-RF75-G96H-J3RM Duplicate Advisory: OpenClaw's complex interpreter pipelines could skip exec script preflight validation

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fvx6-pj3r-5q4q. This link is maintained to preserve external references. Original Description OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protecti...

Incomplete List of Disallowed Inputs

Overview @openclaw/discord is an OpenClaw Discord channel plugin Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs through the validateScriptFileForShellBleed process. An attacker can execute unauthorized script content by crafting piped, substituted, or...