Log4ShellAuditor

🤖 AUTO AUDIT Isolated demonstration testbed of an autonomous reflexive executor agent Go/Java Русский 🇷🇺 • English 🇬🇧 • 中文 🇨🇳 • Español 🇪🇸 • Deutsch 🇩🇪 • Italiano 🇮🇹 • العربية 🇸🇦 🧭 Overview !NOTE AUTO AUDIT is a software suite demonstrating a 100% autonomous closed loop Sense-Think-Act for...

CVE-2026-79832

A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...

CVE-2026-79832

A stack buffer overflow vulnerability exists in the HPE NonStop SQL/MX Executor component. This vulnerability could potentially lead to information disclosure or a process crash . Affected software versions include TSQLEXE T9193L01^AIP and earlier, as well as T9193L02 . HPE has released fixes for...

CVE-2026-79832 HPE NonStop SQL/MX Executor - Buffer overflow vulnerability

A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...

EUVD-2026-102003

A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...

CVE-2026-76066

IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing too...

CVE-2026-76066 IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode

IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing too...

CVE-2026-76066

The IntentKit software (through version 2.6.3 ) is vulnerable to an authorization bypass because the executor validates tool calls against the full tool registry instead of the narrowed tool advertisement enforced by ToolBindingMiddleware . This flaw allows unauthenticated or public callers in WE...

CVE-2026-76066 IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode

IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing too...

CVE-2026-76066 IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode

IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing too...

CVE-2026-79832: Stack-based Buffer Overflow

A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...

CVE-2026-110641

@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compressfile. Attackers who can name a file dropped into a watched directory can inject $ substitutions or unquoted shell...

CVE-2026-110641 @runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Name

@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compressfile. Attackers who can name a file dropped into a watched directory can inject $ substitutions or unquoted shell...

CVE-2026-110641

The @runnerty/executor-decompress package (versions through 3.1.1 ) is vulnerable to an OS command injection via the compress_file function. The root cause is the improper handling of archive file names, which allows an attacker to inject $() substitutions or unquoted shell metacharacters into sh...

EUVD-2026-101269

@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compressfile. Attackers who can name a file dropped into a watched directory can inject $ substitutions or unquoted shell...

ROOT-APP-NPM-CVE-2026-103921 CVE-2026-103921 in @graphql-tools/executor-legacy-ws - Patched by Root

Root has patched CVE-2026-103921 in the @graphql-tools/executor-legacy-ws package for Root:npm. Multiple fixed versions available...

PT-2026-114083

Name of the Vulnerable Software and Affected Versions @runnerty/executor-decompress versions prior to 3.1.2 Description An OS command injection issue exists where attackers can execute arbitrary commands by providing specially crafted archive file names to the compress file function. By naming a...

CVE-2026-110641: Improper Neutralization of Special Elements used in an OS Command

@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compressfile. Attackers who can name a file dropped into a watched directory can inject $ substitutions or unquoted shell...

CVE-2026-55376: Improper Neutralization of Special Elements used in an OS Command

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

secator

La navaja suiza del pentester. Características • Comandos soportados • Instalación • Uso • Documentación • ¡Únete a nosotros en Discord! secator es un ejecutor de tareas y flujos de trabajo utilizado para evaluaciones de seguridad. Soporta docenas de herramientas de seguridad conocidas y está...