CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Apache ActiveMQ와 OpenWire 개요 ActiveMQ는 JMS를 지원하는 클라이언트를 포함하는 브로커, 자바 뿐만 아니라 다양한 언어를 이용하는 시스템 간 의 통신을 할 수 있게해준다. 또한 클러스터링 기능 및 DB 그리고 FileSystem을 통해 각 시스템간의 일관성 및 지속성을 유지 시켜주는 오픈 소스 메세징 그리고 통합 패턴 서버 입니다. OpenWire는 Apache ActiveMQ에서 사용되는 이진 메시징 프로토콜...

PyHmmm

PyHmmm これは何ですか？ これはPythonで書かれたHavoc C2用のサードパーティエージェントです。カスタムHavocエージェントの書き方を学ぶための基本的なPoCを意図しており、付随するブログ記事は https://codex-7.gitbook.io/codexs-terminal-window/red-team/red-team-dev/extending-havoc-c2/third-party-agents です。 機能 現在、サポートしているコマンドは2つだけです： shell system command exit これは OPSEC...

CVE-2026-104859 Nx: OS command injection in the @nx/docker release pipeline

Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1, the @nx/docker release pipeline builds docker tag, image lookup, and docker push invocations as shell command strings. The release.docker.repositoryName and registryUrl...

PT-2026-104410

Name of the Vulnerable Software and Affected Versions Nx versions 21.4.0 through 22.7.7 Nx versions 23.0.0 through 23.1.0 Description The @nx/docker release pipeline constructs docker tag, image lookup, and docker push invocations as shell command strings. The configuration values...

CVE-2021-45897

CVE-2021-45897 CVE-2021-45897（別名SCRMBT-180）のPoC - SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45897 使用例: .venv ➜ CVE-2021-45897 git:main ✗ ./exploit.py -u user -p --payload "cat /etc/passwd" INFO:CVE-2021-45897:Login did work -...

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack 这些只是一些脚本，你可以用它们来检测和利用 Apache Struts 漏洞（CVE-2017-5638） 有一个MassScanner和一个Exploiter，你可以使用扫描器批量扫描一组URL，然后通过Exploiter进行利用。 Exploiter会在易受攻击的服务器上运行任意shell命令。...

Rocky Linux 10.2 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-debugsource / libxml2-devel / etc (crlsa-2026_39304)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639304 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly from t...

PT-2026-103902

Name of the Vulnerable Software and Affected Versions Fortra BoKS Manager affected versions not specified Description An authenticated user with permissions to add CRL URLs can trigger shell command substitution. This occurs when using the BCC, the WSI REST or SOAP API, or the cacrl command-line...

CentOS Linux 8.4 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1777626401)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777626401 advisory. - Mitgation of CVE-2026-4519 was incomplete. If the URL contained %action the mitigation could be bypassed for certain browser types...

CVE-2026-51858

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

PT-2026-103609

Name of the Vulnerable Software and Affected Versions camel-ai camel versions 0.2.91a1 through 0.2.91a3 Description The shell exec function within the TerminalToolkit allows for shell command execution driven by prompts without an approval boundary, which can lead to shell command injection...

CVE-2026-51858

The camel-ai camel software versions v0.2.91a1 , v0.2.91a2 , and v0.2.91a3 are vulnerable to arbitrary shell command execution. The root cause is located in the TerminalToolkit.shell_exec function, which allows prompt-driven command execution without an approval boundary . This flaw falls under C...

CentOS Linux 8.5 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1777998709)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1777998709 advisory. - The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web...

EUVD-2026-90422

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

CVE-2026-51858: Undefined Security Weakness

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

CentOS Linux 8 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1778142589)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1778142589 advisory. - The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web...

CVE-2026-51858

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

Linux Distros Unpatched Vulnerability : CVE-2026-102422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any...

CentOS Linux 6 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS6:CLSA-2026:1777038917)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777038917 advisory. - A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 t...

CVE-2026-102828

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer..cmd as unsafe configuration. An application that passes...