PYSEC-2026-4097 MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call

Summary The uploadattachment functions in both the Jira and Confluence modules accept a user-controlled filepath parameter and open the specified file for reading without calling validatesafepath. An authenticated MCP client can supply an arbitrary path such as /etc/passwd or /proc/self/environ,...

PYSEC-2026-4095 MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)

Summary The confluenceuploadattachment and confluenceuploadattachments MCP tools accept a filepath parameter and do not validate that the path is confined to an allowed directory before opening the file. An attacker who can call these tools can read any file accessible to the MCP server process S...

MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

SummaryThe mcp-atlassian server exposes an MCP tool confluenceuploadattachment and the Jira attachment variant that accepts an arbitrary server-side file path and opens it for upload without any path validation. When the server is deployed in HTTP transport mode streamable-http or sse, a remote,...

PYSEC-2026-4104 MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

Summary The mcp-atlassian server exposes an MCP tool confluenceuploadattachment and the Jira attachment variant that accepts an arbitrary server-side file path and opens it for upload without any path validation. When the server is deployed in HTTP transport mode streamable-http or sse, a remote,...

PYSEC-2026-4178 vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation

Summary Current vLLM main lets an inference request choose the PyNvVideoCodec GPU video decoder through mediaiokwargs.video.videobackend, but engine GPU memory reservation is computed only from static startup configuration and VLLMVIDEOLOADERBACKEND. If the server starts with the default...

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

SummaryA server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect theproxy's outbound request to a host of their choosing by smuggling an apibase inside theuserconfig request body, bypassing the existing parameter guard. DetailsLiteLLM Proxy validates request bodies with...

PYSEC-2026-4070 LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

Summary A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy's outbound request to a host of their choosing by smuggling an apibase inside the userconfig request body, bypassing the existing parameter guard. Details LiteLLM Proxy validates request bodies...

vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation

SummaryCurrent vLLM main lets an inference request choose the PyNvVideoCodec GPU video decoder through mediaiokwargs.video.videobackend, but engine GPU memory reservation is computed only from static startup configuration and VLLMVIDEOLOADERBACKEND. If the server starts with the default...

Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

SummaryWhen more than one external tool server is reachable in the same request, a tool call to a server configured for bearer authentication can arrive carrying the calling user's Open WebUI session cookies alongside that server's own key. The cookie jar is built per connection, but the callable...

PYSEC-2026-4124 Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

Summary When more than one external tool server is reachable in the same request, a tool call to a server configured for bearer authentication can arrive carrying the calling user's Open WebUI session cookies alongside that server's own key. The cookie jar is built per connection, but the callabl...

PYSEC-2026-4125 Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

SummaryThe built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...

munin

| | | | | \ | | | | | | \ \ | | | | \ \ /. | | | | | | | | | | | | | | | | | | | | /| || || || ||| || || || || || // / /'" " 用于 Virustotal 及其他服务的在线哈希检查器 Florian Roth 什么是 Munin？ Munin 是一个在线哈希检查工具，能从多个在线来源检索有价值的信息。 当前版本的 Munin 可查询以下服务： Virustotal HybridAnalysis Any.Run URLhaus MISP CAPE Malshare...

CVE-2026-102504

A flaw was found in Imager. This vulnerability allows an attacker to cause a Denial of Service DoS by supplying an out-of-range channel count parameter when reading raw image files. The application attempts an excessive memory allocation without validating the input, causing an unhandled allocati...

ghostbuster

Table of Contents Table of Contents Ghostbuster The problem Project Features Installing Ghostbuster Using Ghostbuster Example Output Setting up your AWS accounts Setting up Cloudflare Optional Authors License Ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources with...

CVE-2026-29000

CVE-2026-29000 — pac4j-jwt JWE 认证绕过 研究 pac4j-jwt 库中 JWE 认证漏洞的 CTF 实验室 CVSS 9.3（严重）· CWE-287 · 受影响版本：pac4j-jwt ← 访问管理面板 ↓ 读取敏感数据：员工列表、系统配置、flag 项目结构 CVE-2026-29000/ ├── lab/ 目标 – Flask 应用（NexusBank 员工门户） │ ├── app.py 存在漏洞的主应用 │ ├── Dockerfile 构建时将 Flag 写入 /flag.txt │ └── requirements.txt │ ├──...

ghostbuster

目录 目录 Ghostbuster 问题描述 项目特性 安装 Ghostbuster 使用 Ghostbuster 输出示例 设置 AWS 账户 设置 Cloudflare（可选） 作者 许可证 Ghostbuster 通过分析你在所有 AWS 账户中的资源，消除悬挂的弹性 IP。 Ghostbuster 获取你所有 AWS 账户（Route53）中的全部 DNS 记录，并可选地通过 CSV 输入或 Cloudflare 获取记录。 收集完这些记录后，Ghostbuster 遍历你所有的 AWS 弹性 IP 和网络接口公共 IP 并收集数据。 通过拥有完整的 DNS 记录（来自...

emploleaks

EmploLeaks EmploLeaks 是一款 OSINT（开源情报）工具，配备 CLI 界面，旨在发现并关联目标企业员工的相关信息。它能够收集 LinkedIn 个人资料、生成潜在的企业电子邮件、在泄露数据库中（内部基于 ClickHouse）搜索已泄露的凭证、通过 HaveIBeenPwned 验证已知漏洞、发现企业基础设施并在社交媒体中描绘员工画像。所有信息均本地存储在 SQLite 中，以供后续分析。 特性 从 LinkedIn 搜索和枚举员工（使用会话 Cookie 进行爬取） 自动生成潜在的企业电子邮件，支持自定义格式 在自有 ClickHouse 数据库中搜索已泄露的凭...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

coderunner

CodeRunner：面向 AI 代理的本地沙箱 CodeRunner 帮助你将 AI 代理及其操作安全地隔离在沙箱中。 关键用例： 你可以在我们的沙箱中运行多个 Claude Code 或 AI 代理，无需担心数据丢失和外泄。 快速开始 前置要求： Mac（macOS 和 Apple Silicon M1/M2/M3/M4），Python 3.10+ git clone https://github.com/instavm/coderunner.git cd coderunner chmod +x install.sh ./install.sh 停止与恢复 完成后停止沙箱：...