93267 matches found
codeql-workshop
CodeQL로 취약점 찾기 원작 워크숍: Sylwia Budzynska 사전 준비사항 • 자료 • 워크숍 대상 : 보안 엔지니어, 보안 연구자, 개발자. 배울 내용 : CodeQL을 사용하여 코드 탐색 및 보안 문제를 찾는 방법을 배웁니다. 만들어볼 것 : 보안 권고를 기반으로 Command Injection을 찾는 CodeQL 쿼리를 작성합니다. 📣 사전 준비사항 두 가지 옵션 중 하나를 선택하여 워크숍 실습을 진행할 수 있습니다: 옵션 A: 로컬 설치 VS Code 사용 - CodeQL이 로컬 머신에서 실행됩니다 옵션 B:...
Hack-The-Box-Enigma-Findings-Report
🛡️ Hack The Box - Enigma 연구 결과 보고서 📋 개요 이 저장소는 Hack The Box 머신 Enigma에 대한 종합적인 침투 테스트 보고서를 포함합니다. 🔍 주요 발견 사항 안전하지 않은 NFS 공유로 온보딩 문서 노출 - 중간 심각도 암호화되지 않은 이메일 콘텐츠를 통한 내부 자격 증명 노출 - 중간 심각도 직원 IMAPS 계정 간 비밀번호 재사용 - 높은 심각도 OpenSTAManager 인증된 OS 명령 주입 CVE-2025-69212 - 치명적 심각도 웹 애플리케이션 구성의 평문 데이터베이스 자격 증...
CVE-2026-105767
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105691
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105697
Langflow versions prior to 1.10.3 are vulnerable to OS command injection due to a lack of allowlisting in the MCP stdio transport configuration. An attacker capable of accessing MCP server settings or using the MCP Tools component can execute arbitrary OS commands (e.g., rm -rf, reverse shells) o...
CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...
CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...
CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691
The open-source design platform Penpot contains an OS Command Injection vulnerability in its SVG exporter affecting versions prior to 2.18.0 . The root cause is the unsafely handling of an attacker-controlled fill-color value from a text object, which is placed into a ppmcolormask command string ...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
Exploit for Injection in Dlink Dir-868L_B1_Firmware
CVE-2025-14659: D-Link DHCP Hostname Command Injection An Off...
EUVD-2026-92780
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105767
The integrate-platform-docs composite GitHub Action in Chainguard Academy (edu) is vulnerable to OS Command Injection (CWE-78). The issue arises because the project_id or storage_bucket inputs are interpolated directly into Bash gcloud storage cp commands using ${{ inputs.* }} expressions between...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2017-1000117
CVE-2017-1000117 프로젝트 소개 사이버 보안 과정 설계 주제 중 하나 CVE-2017-1000117 취약점 재현 PoC+Exp Git + SSH 취약점 소개: 취약점 이름: Git 명령어 주입 취약점 CNNVD 번호: CNNVD-201708-670 위험 등급: 중간 위험 CVE 번호: CVE-2017-1000117 취약점 유형: 명령어 주입 발표일: 2017-08-16 위협 유형: 원격 업데이트일: 2017-10-17 제조사: git-scm 취약점 출처: TrevorJay 취약점 개요: Git은 미국 소프트웨어 개...