InlineExecute-Assembly

InlineExecute-Assembly InlineExecute-Assembly는 보안 전문가가 Cobalt Strike의 기존 fork and run execute-assembly 모듈 대신 프로세스 내 .NET 어셈블리 실행을 수행할 수 있도록 하는 개념 증명 Beacon Object FileBOF입니다. InlineExecute-Assembly는 진입점이 Mainstring args 또는 Main인 모든 어셈블리를 실행합니다. 이를 통해 사전 수정 없이 대부분의 공개된 도구를 실행할 수 있습니다. BOF는 실행 전에...

TangledWinExec

Tangled WinExec 이 저장소는 Windows 프로세스 실행 기법을 조사하기 위해 만들어졌습니다. 대부분의 PoC는 기법에 대응하는 이름으로 명명됩니다. 프로젝트 BlockingDLL : 이 도구 모음은 DLL 차단Blocking DLL 프로세스를 테스트하기 위한 것입니다. README.md를 참조하십시오. CloneProcess : 이 디렉터리는 프로세스 포킹forking과 리플렉션reflection을 위한 것입니다. README.md를 참조하십시오. CommandLineSpoofing : 이 PoC는 명령줄...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

sinter

Sinter Sinter는 macOS 10.15 이상을 위한 100% 사용자 모드 엔드포인트 보안 에이전트이며, Swift로 작성되었습니다. Sinter는 사용자 모드 EndpointSecurity API를 사용하여 macOS 커널로부터 인증 콜백을 구독하고 수신하며, 일련의 보안 관련 이벤트 유형을 처리합니다. 현재 버전의 Sinter는 프로세스 실행을 허용/차단하는 기능을 지원합니다. 향후 버전에서는 파일, 소켓, 커널 이벤트와 같은 다른 유형의 이벤트도 지원할 계획입니다. Sinter는 작업 진행 중입니다. 피드백을...

cve-2026-23744

CVE-2026-23744 – MCPJam Inspector 무인증 원격 코드 실행 RCE 설명 제품 : MCPJam Inspector 영향을 받는 버전 : ≤ 1.4.2 수정된 버전 : 1.4.3 유형 : 무인증 원격 코드 실행 RCE 공격 경로 : 네트워크 인증 필요 : 아니요 사용자 상호작용 필요 : 아니요 CVSS v3.1 : 9.8 치명적 CVE-2026-23744 는 MCPJam Inspector ≤ 1.4.2 에 영향을 미치는 치명적인 무인증 원격 코드 실행 RCE 취약점입니다. 이 문제는 Inspector가 사용...

CVE-2023-32571

🐞 CVE-2023-32571 - System.Linq.Dynamic.Core 원격 코드 실행 CVE-2023-32571에 대한 개념 증명Proof of Concept으로, System.Linq.Dynamic.Core1.0.7.10 1.2.25의 원격 코드 실행 취약점입니다. 이 취약점은 Where, Select, OrderBy를 포함한 메서드에 신뢰할 수 없는 입력이 파싱될 때 공격자가 임의 코드와 명령을 실행할 수 있게 합니다. ⚠️ 면책 조항 이 도구는 교육 및 승인된 테스트 목적으로만 제공됩니다. 사전 상호 동의 없이...

CVE-2026-100599

OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audio command arrays and executes them on a paired node without going through the normal system.run approval flow. In...

CVE-2026-100599

OpenClaw versions 2026.5.1 through 2026.7.0 are vulnerable to Remote Code Execution because the googlemeet.chrome command fails to apply the configured exec approval path. The command accepts caller-supplied audio command arrays and executes them on a paired node, bypassing the standard system.ru...

EUVD-2026-87381

OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audio command arrays and executes them on a paired node without going through the normal system.run approval flow. In...

CVE-2026-100587

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass in the Codex computer-use installation command . The flaw occurs because the system fails to properly validate owner authorization, allowing non-owner channel senders to install arbitrary plugins and execute MCP proc...

CVE-2026-79919

MaxKB , an open-source enterprise AI assistant, has a sandbox-escape vulnerability in its function-library code prior to version 2.10.6-lts . Attackers can bypass the LD_PRELOAD sandbox by invoking ctypes.CDLL from an importlib.abc.MetaPathFinder callback—causing the dlopen call-stack heuristic t...

PT-2026-96264

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.6-lts Description Function-library code running under the LD PRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback. This allows the dlopen call-stack heuristic to identify a Python...

Linux Distros Unpatched Vulnerability : CVE-2026-45794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource fall...

CVE-2026-45794

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS predicate blob after a messageId expires from the in-memory dispatcher, treats top-level blob keys as Java class names fo...

CVE-2026-45794

OpenAM Community Edition (through 16.0.6 ) is vulnerable to unsafe Java deserialization (CWE-502) in its Push Notification SNS callback resource (SnsMessageResource ). The route is mounted with anonymous access ; after a message ID expires from the in-memory dispatcher, it falls back to a CTS-sto...

CVE-2026-45794 OpenAM Unsafe Java Deserialization via SNS

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS predicate blob after a messageId expires from the in-memory dispatcher, treats top-level blob keys as Java class names fo...

CVE-2026-57124: Improper Neutralization of Special Elements used in an OS Command

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory authentication and accept caller-controlled command and args values that PraisonAIUI passes to StdioMCPClient to start a local process. Because the UI commands...

CVE-2026-76059

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by a protection mechanism failure (CWE-693) in its static code security scanner. An attacker who can submit custom component source code can bypass the scanner by crafting an annotated class-body assignment that resolves to a dangerous c...

PT-2026-89610

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.5 Description A logic error in the static security scanner allows an attacker to bypass security checks by crafting an annotated class-body assignment. This technique uses alias tracking to resolve ...

CVE-2026-78574 Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...