Rocky Linux 8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource / go-toolset / golang / etc Multiple Vulnerabilities (crlsa-2025_22668)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202522668 advisory. os/exec: Unexpected paths returned from LookPath in os/exec CVE-2025-47906 golang: archive/tar: Unbounded allocation when parsing GNU sparse map...

Rocky Linux 9 [CIQ] Security Update: go-filesystem / go-rpm-macros / go-rpm-macros-debuginfo / etc (crlsa-2025_22005)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202522005 advisory. os/exec: Unexpected paths returned from LookPath in os/exec CVE-2025-47906 Tenable has extracted the preceding description block directly from the CIQ security...

CentOS Linux 8 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS-STREAM8:CLSA-2026:1767800942)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1767800942 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.4:CLSA-2026:1767613214)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1767613214 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query strin...

CVE-2026-101880

OpenClaw Windows Node versions before 2026.7.1 are vulnerable to an authorization bypass in the system.run exec-approval policy. The root cause is that the ExecShellWrapperParser fails to correctly split commands on pipe operators or extract command substitutions. This allows connected gateways o...

CVE-2026-101880 OpenClaw Windows Node before 2026.7.1 Authorization Bypass

OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...

CVE-2026-101880 OpenClaw Windows Node before 2026.7.1 Authorization Bypass

OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...

Malicious code in friendly-greeting-tools (PyPI)

Versions 0.1.0 through 0.3.6 of friendly-greeting-tools disguise encoded Snowflake credential and data theft routines as a hello-world demo. In versions through 0.3.5, the default rundemo payload reads the Snowflake session token, connection configuration, dbt profiles, and pip configuration, the...

MAL-2026-17416 Malicious code in friendly-greeting-tools (PyPI)

Versions 0.1.0 through 0.3.6 of friendly-greeting-tools disguise encoded Snowflake credential and data theft routines as a hello-world demo. In versions through 0.3.5, the default rundemo payload reads the Snowflake session token, connection configuration, dbt profiles, and pip configuration, the...

Rocky Linux 9.6 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc (ALMALINUX9.6:CLSA-2025:1767027096)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1767027096 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.5:CLSA-2026:1767609927)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1767609927 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query strin...

cve-2020-11651-exp-plus

Utilisez l'option --exec avec bash, car le script original utilisait /bin/sh, ce qui rend certaines commandes incompatibles, comme le shell inverse bash. 2. Le code original récupérait la version locale de salt-master pour déterminer si l'hôte distant était affecté, ce qui est clairement une...

CVE-2025-69212-PoC

CVE-2025-69212 — PoC d'injection de commandes OpenSTAManager P7M OpenSTAManager = 2.9.8 — Injection de commandes système via un nom de fichier .p7m malveillant dans un téléchargement ZIP. Fichier : src/Util/XML.php:100 — $file non assaini dans exec Vecteur : /plugins/importFEZIP/actions.php → ZIP...

CVE-2021-27877-PoC

CVE-2021-27877 Preuve de concept Ce dépôt contient une version modifiée du module Metasploit original de Rapid7 pour CVE-2021-27877 affectant l'agent Veritas Backup Exec. Lors de mes tests, le module Metasploit original a bien identifié la cible comme vulnérable mais a systématiquement échoué à...

CVE-2025-27636-Practical-Lab

🛡️ CVE-2025-27636 — Практическая лаборатория эксплуатации для Apache Camel 🔍 Обзор CVE-2025-27636 — это критическая уязвимость удаленного выполнения кода RCE в Apache Camel , а именно в компоненте camel-exec. Она возникает из-за тонкой, но опасной проблемы: DefaultHeaderFilterStrategy выполняет...

CVE-2026-93348

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

CVE-2026-33017

CVE-2026-33017 - Langflow RCE non authentifiée ⚠️ AVERTISSEMENT : Ce dépôt est destiné uniquement à des tests de sécurité autorisés et à des fins éducatives. Utilisez-le uniquement sur des systèmes que vous possédez ou pour lesquels vous disposez d'une autorisation explicite de test. L'auteur n'es...

CVE-2021-27876

CVE-2021-27876 Exploit RCE non authentifié pour l'agent Veritas Backup Exec CVE-2021-27876/77/78 — contournement de l'authentification SHA vers SYSTEM via NDMP CVEs CVE| Description| CVSS 3.1 ---|---|--- CVE-2021-27876| Contournement de l'authentification via manipulation du hachage SHA dans le...

win-exec-calc-shellcode

win-exec-calc-shellcode Небольшой shellcode без NUL-байтов, запускающий calc.exe. Работает на x86 и x64 версиях Windows 5.0-6.3 2000, XP, 2003, 2008, 7, 8, 8.1, во всех пакетах обновления. Размеры сборка 306 платформа | размер | выравнивание стека | обёртка функции | функция+сохр. рег. |...