79 matches found
vpod
Vpod 在线演示 • 快速开始 • 文档 • 问题反馈 • 参与贡献 什么是 vpod？ vpod 是一个轻量级、可移植的沙箱，可为不受信任的进程提供即时的 Linux 环境。它采用 RISC‑V 架构，并完全运行在 WebAssembly 内部。 快速启动 ：不到一秒即可完成启动。 可移植 ：无需任何安装配置即可在任何地方运行。 隔离性 ：所有执行状态都保留在 WASM 沙箱内部。 工作原理 vpod 运行一个完整的 RISC‑V 系统（RV64GC，单 vCPU），该系统被编译为 WebAssembly。其内部启动一个真实的 Linux 内核和真实的用户空间，因此...
fusee-toy
这个仓库包含了fusee-toy项目的源代码，它是我对CVE-2018-6242（又名Fusée Gelée，又名shofel2）的基本实现。该项目写于2021年1月，旨在加深我对这个漏洞的理解。 此实现参考了fusee-nano和fusee-launcher项目。它被构建为在现代Linux环境下工作。...
CVE-2026-47622
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...
EUVD-2026-51329
The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework TCF service that does not require any...
CVE-2026-64650 AI SDK Codex Harness Tool Relay Authorization Bypass
The @ai-sdk/harness-opencode tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contains an allowed helper script path the Codex CLI shim. This...
CVE-2026-64650 AI SDK Codex Harness Tool Relay Authorization Bypass
The @ai-sdk/harness-opencode tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contains an allowed helper script path the Codex CLI shim. This...
CVE-2026-64651 AI SDK OpenCode Harness Tool Relay Authorization Bypass
The @ai-sdk/harness-opencode tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path host-tool-mcp.mjs. This allows untrusted code executing in the...
CVE-2026-64651 AI SDK OpenCode Harness Tool Relay Authorization Bypass
The @ai-sdk/harness-opencode tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path host-tool-mcp.mjs. This allows untrusted code executing in the...
CVE-2026-64651
The @ai-sdk/harness-opencode tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path host-tool-mcp.mjs. This allows untrusted code executing in the...
CVE-2026-64651
The CVE-2026-64651 entry concerns the @ai-sdk/harness-opencode tool that connects HarnessAgent to OpenCode via a sandboxed bridge. Before version 1.0.28, the tool would relay requests from any process whose command line included an allowed helper script path (host-tool-mcp.mjs), enabling untruste...
PT-2026-61722
Name of the Vulnerable Software and Affected Versions @ai-sdk/harness-opencode versions prior to 1.0.29 Description The tool relay authorizes requests from any process whose command line contains an allowed helper script path. This allows untrusted code executing in the sandbox to invoke arbitrar...
PT-2026-51509
Name of the Vulnerable Software and Affected Versions Nuxt versions prior to 4.4.7 Nuxt versions prior to 3.21.7 Description When running the development server on Linux, the vite-node IPC Inter-Process Communication server binds to an abstract-namespace Unix socket without permission restriction...
Buffer-Overflow-Exploit-C
Buffer Overflow & Stack Smashing Exploit Overview This pro...
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure
High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been...
SUSE CVE-2026-26201
emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger fatal error: concurrent map read and map write, causing C2 process cra...
CVE-2026-26201
CVE-2026-26201 concerns emp3r0r, a Linux C2, with a race condition in multiple shared maps accessed across goroutines before version 3.21.2. Under concurrent activity, the Go runtime can trigger fatal error: concurrent map read and map write, causing the C2 process to crash (availability loss). T...
PT-2026-7913
Name of the Vulnerable Software and Affected Versions emp3r0r versions prior to 3.21.1 Description emp3r0r is a command and control C2 tool designed for Linux environments. Versions prior to 3.21.1 accept untrusted agent metadata, specifically Transport and Hostname, during the check-in process...