3634 matches found
CVE-2025-27636-Practical-Lab
🛡️ CVE-2025-27636 — Apache Camel 实战利用实验室 🔍 概述 CVE-2025-27636 是 Apache Camel 中一个严重的远程代码执行 RCE 漏洞，具体位于 camel-exec 组件。它源于一个微妙但危险的问题： DefaultHeaderFilterStrategy 对标头名称执行区分大小写的检查，可以使用替代大小写来绕过。 这意味着内部 Camel 标头（例如 CamelExecCommandExecutable）如果大小写被篡改（例如 cAmeLexecCommandExecutable），本应被阻止的它们也可能通过。 当此标头到达...
CVE-2026-93348
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-33017
CVE-2026-33017 - Langflow 未授权远程代码执行 ⚠️ 免责声明： 此仓库仅用于授权的安全测试和教育目的。仅在您拥有或已获得明确许可的系统上使用。作者不对该工具的任何滥用或损害负责。 概述 CVE-2026-33017 是 Langflow（一个用于构建 LangChain 应用程序的可视化框架）中的一个未授权远程代码执行漏洞。 POST /api/v1/buildpublictmp/flowid/flow 端点允许在未认证的情况下构建公共流程。当提供可选的 data 参数时，端点会使用攻击者控制的流程数据（节点定义中包含任意 Python...
CVE-2021-27876
CVE-2021-27876 针对 Veritas Backup Exec Agent 的未认证远程代码执行利用（CVE-2021-27876/77/78）—— 通过 NDMP 绕过 SHA 认证获取 SYSTEM 权限 CVEs CVE| 描述| CVSS 3.1 ---|---|--- CVE-2021-27876| 通过 NDMP 协议中的 SHA 哈希操纵绕过认证| 9.8 严重 CVE-2021-27877| 未认证任意文件读取（通过 NDMP）| 9.8 严重 CVE-2021-27878| 通过 NDMPEXECUTECOMMAND 执行任意 OS 命令| 9.8 严重 公...
win-exec-calc-shellcode
win-exec-calc-shellcode Shellcode pequeño y libre de NUL que ejecuta calc.exe. Se ejecuta en versiones x86 y x64 de Windows 5.0-6.3 2000, XP, 2003, 2008, 7, 8, 8.1, todos los service packs. Tamaños build 306 plataforma | tamaño | alineación de pila | envoltorio de función | func+guardar regs |...
CVE-2025-9074-Docker-Desktop-API-Escape-PoC
🐚 docker-shell 一款轻量级、无依赖的 Bash 脚本，仅需 curl、dd、od 和 awk，即可在 Docker 容器内获得模拟交互式 Shell 。无需 Python、无需 jq、无需编辑器。 专为仅有原始 Shell 访问权限、需通过 Docker Engine API 在 Docker 容器内执行命令的环境而设计。 🧠 工作原理 该脚本不依赖 Docker CLI，而是直接与 Docker Engine REST API 通过 HTTP 通信（在 Docker Desktop / WSL2 环境中，默认暴露于 http://192.168.65.7:2375）。...
Unauthenticated-RCE-FUXA-CVE-2023-33831
未认证 RCE FUXA CVE-2023-33831 该漏洞影响 FUXA 的脚本组件，原因是对用户可控输入缺乏控制或清理，从而允许使用可被扩展用于远程代码执行的危险方法。 受影响的路由是 /api/runscript，在该路由中，无需身份验证即可通过 POST 方法的 code 参数，利用 childprocess 模块的 exec 函数执行命令。 使用方法 python CVE-2023-33831.py --rhost --rport --lhost --lport 链接: https://www.youtube.com/watch?v=Xxa6yRB2Fpw...
Letta-CVE-2025-51482-RCE
Letta-CVE-2025-51482-RCE Análisis de la causa de la vulnerabilidad 1. Falta de revisión de seguridad del código Problema: El sistema no realiza ninguna revisión de seguridad sobre el código fuente proporcionado por el usuario. Evidencia: generateexecutionscript El método inserta directamente el...
CVE-2026-100584
OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...
CVE-2026-100561
OpenClaw npm package 'openclaw' versions = 2026.3.22 and 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign...
CVE-2026-100530
OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directories. Attackers with an allow-always approval can reuse it to run the same command against unreviewed files or repositories with materiall...
EUVD-2026-87381
OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audio command arrays and executes them on a paired node without going through the normal system.run approval flow. In...
EUVD-2026-87467
OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...
CVE-2026-100584
The OpenClaw npm-distributed agent runtime (versions >= 2026.2.26 and
CVE-2026-100561 OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper
OpenClaw npm package 'openclaw' versions = 2026.3.22 and 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign...
EUVD-2026-87489
OpenClaw npm package 'openclaw' versions = 2026.3.22 and 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign...
CVE-2026-100561 OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper
OpenClaw npm package 'openclaw' versions = 2026.3.22 and 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign...
CVE-2026-100561
The OpenClaw (npm package 'openclaw' ) versions >= 2026.3.22 and
CVE-2026-100561 OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper
OpenClaw npm package 'openclaw' versions = 2026.3.22 and 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign...