CVE-2026-84888 RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

EUVD-2026-70293

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-84888 RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation

RightNow-AI OpenFang up to version 0.6.9 contains a vulnerability in the shell_exec function within crates/openfang-runtime/src/tool_runner.rs. The flaw causes uncontrolled memory allocation , exploitable remotely with low privileges and no user interaction. The primary impact is low availability...

proxyshell

ProxyShell Эксплойт Proof of Concept для Microsoft Exchange CVE-2021-34473, CVE-2021-34523, CVE-2021-31207 Подробности Для получения справочной информации и контекста прочитайте статью в блоге, описывающую исследование Horizon3: https://www.horizon3.ai/news/blog/proxyshell Возможности Не требуетс...

K000163187: Intel UEFI vulnerability CVE-2025-20064

Security Advisory Description Improper input validation in the UEFI FlashUcAcmSmm module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result m...

Metasploit-CVE-2026-54121-Certighost

Metasploit-CVE-2026-54121-Certighost Certighost изначально обнаружен и эксплуатируется h0j3n и Aniq Fakhrul. Этот репозиторий содержит вспомогательный модуль Metasploit, который повышает привилегии от любого доменного пользователя с низкими привилегиями до полной компрометации домена, злоупотребл...

awesome-osint

Awesome OSINT A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence OSINT is intelligence collected from publicly available sources. In the intelligence community IC, the term "open" refers to overt, publicly available sources as opposed to...

CVE-2026-84887 simular-ai Agent-S Model-generated GUI Action Execution Workflow grounding.py denial of service

A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI Action Execution Workflow. The manipulation leads to denial of service. Remote exploitation of the attack is possibl...

EUVD-2026-70285

A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI Action Execution Workflow. The manipulation leads to denial of service. Remote exploitation of the attack is possibl...

CVE-2026-84887 simular-ai Agent-S Model-generated GUI Action Execution Workflow grounding.py denial of service

A denial-of-service vulnerability exists in simular-ai Agent-S up to version 0.3.2 , located in the Model-generated GUI Action Execution Workflow component, specifically within the grounding.py file. The root cause is described as an "unknown functionality" manipulation leading to DoS . Remote ex...

Auto_EAP

AutoEAP Introduction Publié le 15 septembre 2016 AutoEAP.py est un script conçu pour effectuer des attaques automatisées par force brute contre différents types de réseaux EAP. Ces types de réseaux sans fil fournissent une interface pour faciliter la devinette de mots de passe des identifiants de...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: Terminal Trove The $HOME of all things in the terminal | Warp Built for coding with multiple AI agents ---|--- Contents About Screenshot Live Demo Mirror Features Usage Deployment...

cve-2019-1040-scanner

CVE-2019-1040 스캐너 SMB를 통해 CVE-2019-1040 취약점을 확인합니다. 이 스크립트는 대상 호스트에 연결하여 잘못된 NTLM 인증을 전송합니다. 이것이 수락되면 호스트는 CVE-2019-1040에 취약하며, ntlmrelayx와 함께 MIC 제거 공격을 실행할 수 있습니다. 로그인 정보 자체는 유효하므로 실패한 로그인 시도가 생성되지 않는다는 점에 유의하십시오. 단지 NTLM 메시지 무결성 코드가 없기 때문에 인증이 거부되며, badpwdcount는 증가하지 않습니다. 사용법 이 스크립트는 최신...

CVE-2026-84886 simular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumption

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file guiagents/s1/utils/ocrserver.py of the component OCR HTTP API. Executing a manipulation of the argument imgbytes can lead to resource consumption. The attack may ...

EUVD-2026-70284

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file guiagents/s1/utils/ocrserver.py of the component OCR HTTP API. Executing a manipulation of the argument imgbytes can lead to resource consumption. The attack may ...

CVE-2026-84886 simular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumption

A resource consumption vulnerability affects the OCR HTTP API component of simular-ai Agent-S versions up to 0.3.2. The flaw resides in the ImageData function within the file gui_agents/s1/utils/ocr_server.py, where manipulation of the img_bytes argument can exhaust system resources. The attack i...

CTFs

CTFs Writeups / Fichiers pour certains des CTFs Cyber que j'ai réalisés J'ai également inclus une liste de ressources CTF ainsi qu'une antisèche complète couvrant des tonnes de défis CTF courants. !NOTE Il existe désormais un miroir web de ce dépôt à hackback.zip Table des matières Ressources...

Claude-BugHunter

claude-bughunter Un ensemble de compétences Claude autonome pour la chasse aux bugs et le travail de red team externe · 82 compétences · 15 commandes slash · 681 modèles de rapports divulgués couvrant 24 classes de vulnérabilités principales · matrices d'attaque identité d'entreprise +...

CVE-2026-84885 simular-ai Agent-S CodeAgent code_agent.py denial of service

A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file codeagent.py of the component CodeAgent. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-84885 simular-ai Agent-S CodeAgent code_agent.py denial of service

A denial of service vulnerability affects simular-ai Agent-S versions 0.3.1 and 0.3.2 , specifically within the CodeAgent component (file code_agent.py ). The exact function is described as unknown. The attack is launchable remotely with low complexity and requires low privileges, resulting in pa...