79789 matches found
Vibe-Trading LLM-callable Tools Permit Command Execution, Code Injection, And SSRF
Summary: 5 findings — "BashTool" shell-injection sink F6, the canonical RCE primitive, "BackgroundRunTool" async shell-injection sink F7, backtest "execmodule" runs top-level statements before the "SignalEngine" class check F8 — independent RCE path that does not match BashTool signatures,...
RCE-POCKET-POC-for-PHP2SHELL
PHP2SHELL — CVE-2026-109618 / CVE-2026-109619 Karim BOUDRA...
Vibe-Trading File-read Tools Expose Arbitrary Server-readable Files
Summary: 2 findings — "safeuserpath" accepts any path under "Path.home" or "Path.cwd", which inside the shipped root container resolves to "/root" and "/app" so all of root's home, including "/root/.ssh/idrsa", "/root/.aws/credentials", "/root/.kube/config", and "/app/agent/.env", passes the chec...
CVE-2026-59229
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
CVE-2026-59229 Apache IoTDB: Legacy Pipe Privilege Escalation
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
EUVD-2026-107167
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
CVE-2026-59229
Apache IoTDB versions 2.0.0 through 2.0.10 are vulnerable to a privilege escalation issue in the Legacy Pipe receiver protocol (specifically the handshake and sendPipeData functions). The root cause is the use of a hardcoded SUPER_USER (root) identity when executing data loading and deletion oper...
CVE-2026-59229
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
CVE-2026-59229 Apache IoTDB: Legacy Pipe Privilege Escalation
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
Security update for openssl-certs
This update for openssl-certs fixes the following issue: Updated to 2.92 state bsc1286261 Removed: emSign ECC Root CA - C3 emSign ECC Root CA - G3 emSign Root CA - C1 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
htb-paperwork-poc
HTB · PaperWork — PoC Proof-of-concept per la macchina Pape...
CVE-2026-70386
OnePlus OxygenOS on Android is vulnerable to an OS command injection and Missing Authorization vulnerability. A locally installed application can execute arbitrary shell commands as uid 0 in the u:r:dumpstate:s0 SELinux domain without user interaction. The flaw arises because the atlasservice bin...
Exploit for CVE-2026-72867
CVE-2026-72867 — Dokploy compose branch name storage command i...
Security update for cups-filters
This update for cups-filters fixes the following issue: CVE-2026-95511: lpadmin user can escalate privileges to root via printers that uses a privileged serial backend bsc1282291. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate ...
CVE-2026-114108
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because requireauth returns early when APIAUTHKEY is unset. Attackers can post messages to /sessions/id/messages to trigger root shell...
CVE-2026-114107
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to...
CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when...
UBUNTU-CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when...
CVE-2026-114108 HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because requireauth returns early when APIAUTHKEY is unset. Attackers can post messages to /sessions/id/messages to trigger root shell...
CVE-2026-114108 HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because requireauth returns early when APIAUTHKEY is unset. Attackers can post messages to /sessions/id/messages to trigger root shell...