Letta 0.7.12 - Remote Code Execution

Unauthenticated RCE via POST /v1/tools/run executing attacker tool sourcecode. !/usr/bin/env python3 -- coding: utf-8 -- """Letta 0.7.12 - Remote Code Execution""" import hashlib import json from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

NULL Pointer Dereference in function do_mouse

Description NULL Pointer Dereference in function domouse at vim/src/mouse.c:496 . vim version git log commit 171c683237149262665135c7d5841a89bb156f53 HEAD - master, tag: v9.0.0242, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S /home/fuzz/test/poc3null.dat -c :qa!...