ttyd

ttyd - Share your terminal over the web ttyd is a simple command-line tool for sharing terminal over the web. Features Built on top of libuv and WebGL2 for speed Fully-featured terminal with CJK and IME support ZMODEM lrzsz / trzsz file transfer support Sixel image output support img2sixel / lsix...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS Command Injection PoC Description This repository contains a Proof of Concept PoC for CVE-2026-35585 , a critical OS Command Injection vulnerability discovered in File Browser versions 2.0.0 through 2.33.1. The vulnerability exists in the "Custom Command Hooks"...

CVE-2025-54782

Basic Usage: 1.use python posttest.py urls.txt 2. Custom Command: 2.command python posttest.py urls.txt -c "whoami" python posttest.py urls.txt -c "ls -la /tmp" python posttest.py urls.txt -c "cat /etc/passwd" 3. Specify Thread Count: python posttest.py urls.txt -c "id" -t 10 📁 URL File Format...

edb-40564-mingw-fix

ms11-046-mingw CVE-2011-1249 / MS11-046 — AFD.sys privilege escalation for Windows x86. Original exploit by Tomislav Paskalev EDB-40564. This fork fixes MinGW cross-compilation errors and adds custom command execution via argv1. Changes from the original | Change| Why ---|---|--- 1| FARPROC...

PYSEC-2026-4261 PraisonAI: Project custom command templates can read outside-workspace files into model prompts

Project custom command templates can read outside-workspace files into model prompts Summary PraisonAI's new file-based custom command feature auto-discovers project commands from .praisonai/commands/.md. When a user runs praisonai run --command inside a repository, the command body is interpolat...

EUVD-2026-43174

PraisonAI: Project custom command templates can read outside-workspace files into model prompts...

GHSA-XPX6-X8C2-MW5W PraisonAI: Project custom command templates can read outside-workspace files into model prompts

Project custom command templates can read outside-workspace files into model prompts Summary PraisonAI's new file-based custom command feature auto-discovers project commands from .praisonai/commands/.md. When a user runs praisonai run --command inside a repository, the command body is interpolat...

GHSA-WGVQ-3JXH-4QG7 Duplicate Advisory: PraisonAI: Project custom command templates can read outside-workspace files into model prompts

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xpx6-x8c2-mw5w. This link is maintained to preserve external references. Original Description PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to rea...

CVE-2026-60088 PraisonAI before 4.6.78 Path Traversal via Custom Commands

PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outsidesecret.txt or absolute paths in project command files to exfiltrate process-readable...

CVE-2026-60088

CVE-2026-60088 affects PraisonAI prior to 4.6.78. The issue is a path traversal flaw in custom command templates, where file paths are not validated, allowing an attacker to read files outside the workspace (e.g., @../outside_secret.txt or absolute paths) and exfiltrate process-readable files int...

CVE-2026-60088: Improper Limitation of a Pathname to a Restricted Directory

PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outsidesecret.txt or absolute paths in project command files to exfiltrate process-readable...

PT-2026-57432

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78 Description The software fails to validate file path references within custom command templates. This allows attackers to read files outside the designated workspace by using absolute paths or path traversal...

@steipete/summarize (>=0.7.0, <=0.16.3), custom-command-example (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-53781 via @steipete/summarize-core (>=0.7.0, <=0.16.3)

@steipete/summarize-core NPM version =0.7.0, =0.7.0, =1.3.0, =1.3.2 Source cves: CVE-2026-53781 Source advisory: GHSA-Q9XM-F36C-XM3Q...

@steipete/summarize (>=0.7.0, <=0.16.3), custom-command-example (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-53781 via @steipete/summarize-core (>=0.7.0, <=0.16.3)

@steipete/summarize-core NPM version =0.7.0, =0.7.0, =1.3.0, =1.3.2 Source cves: CVE-2026-53781 Source advisory: OSV:GHSA-Q9XM-F36C-XM3Q...

@steipete/summarize (>=0.7.0, <=0.16.3), custom-command-example (>=1.3.0, <=1.3.2) potentially affected by CVE-2026-53781 via @steipete/summarize-core (>=0.7.0, <=0.16.3)

@steipete/summarize-core NPM version =0.7.0, =0.7.0, =1.3.0, =1.3.2 Source cves: CVE-2026-53781 Source advisory: MEND:CVE-2026-53781...

CVE-2026-3555

Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. User interaction is required to exploit this...

CVE-2026-3555

CVE-2026-3555 describes a heap-based buffer overflow in the Zigbee stack of the Philips Hue Bridge. The flaw occurs in the handling of custom Zigbee ZCL frames during Model Info download, due to insufficient validation of data size before copying to a fixed-size heap buffer. This allows network-a...

CVE-2026-3555 Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability

Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. User interaction is required to exploit this...

CVE-2026-3555 Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability

Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. User interaction is required to exploit this...

(Pwn2Own) Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. User interaction is required to exploit this vulnerability in that the user must initiate the device pairing process. The specific flaw exists within the handling of...