NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

cobaltstrike4.5_cdf-1

cobaltstrike4.5cdf Crack cobaltstrike4.5, remove checksum8 feature, bypass BeaconEye, fix stage leakage via wrong path, add TOTP two-factor authentication, add encrypted username display, fix foreign spawn bug in 4.5, rename client configuration file, etc. cobalt strike4.5 crack cobaltstrike4.5...

CVE-2026-52617

CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: OS command injection via ffmpeg tool options runFFmpegCommand passes a string built from MCP tool parameters to spawn…, shell: true , so shell metacharacters in options, format, codec, pixelFormat or extraOptions execute on the host running the server...

spawn

SPAWN - BOF لكولت سترايك BOF لكولت سترايك يقوم بإنشاء عملية تضحية، وحقنها بشيل كود، وتنفيذ الحمولة. مبني لتجاوز خطافات EDR/UserLand عن طريق إنشاء عملية تضحية مع حماية الكود التعسفي ACG، وBlockDll، وتزييف PPID. بسبب ACG، هذا لا يدعم شيل كود الذي يعتمد على هذه الوظائف: تبديل أذونات الذاكرة بين RW/R...

process-inject-kit

Process Inject Kit This is a port of Cobalt Strike's Process Inject Kit from C to the C++ BOF template. How it works The built in fork and run process injection techniques can be change with the PROCESSINJECTSPAWN and PROCESSINJECTEXPLICIT hooks. This repo provides the following: Source code...

CVE-2016-5636

CVE-2016-5636 PoC for CVE-2016-5636, which is a heap overflow in Python 3.6. This repository includes: crash-with-zip : crash PoC by reading untrusted zip file google-web-engine : crash PoC working on google web engine spawn-shell : a local exploit for spawning shell...

CVE-2026-23744-POC

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE MCPJam Inspector -i -p -m...

CVE-2022-22814_PoC

Privilege Escalation - AsusSystemDiagnosis.exe - Proc39 Full Path: C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.infamd64d385bdc0d33d66f9\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe Issue: The ALPC Port \RPC Control\ASHWTestServer, exposed by AsusSystemDiagnosis.exe is fully accessible ...

mcpshield

mcpshield अनपैच्ड MCP STDIO कमांड-इंजेक्शन दोष के लिए एक ड्रॉप-इन फिक्स CVE-2026-30623 परिवार, जिसे OX Security ने अप्रैल 2026 में "by design" के रूप में खुलासा किया था — कोई SDK पैच नहीं आ रहा है। एक लाइन इम्पोर्ट करें, और आपके Python ऐप द्वारा लॉन्च किया जाने वाला हर stdio MCP सर्वर, OS द्वारा...

CVE-2026-23744-PoC

CVE-2026-23744-PoC Avertissement : Cette preuve de concept est fournie exclusivement pour la recherche en sécurité autorisée, à des fins pédagogiques et dans des environnements de laboratoire contrôlés par exemple, HTB, CTF, ou tests d'intrusion internes avec consentement écrit explicite. Toute...

CVE-2026-79748

MCPHub , a hub for centrally managing and orchestrating multiple MCP servers/APIs, contains a command injection vulnerability in the POST /api/servers and PUT /api/servers/:name endpoints prior to version 0.12.15. These endpoints spawn configured stdio processes via child_process.spawn but lack a...

CVE-2026-79748 MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args)

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.15, the POST /api/servers and PUT /api/servers/:name endpoints in MCPHub create/update MCP server configurations a...

CVE-2026-79748 MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args)

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.15, the POST /api/servers and PUT /api/servers/:name endpoints in MCPHub create/update MCP server configurations a...

zygote-CVE-2024-31317

Zygote Toolkit - CVE-2024-31317 This is a toolkit that uses CVE-2024-31317 to extract private app data via ADB or spawn a shell with an app's UID. This vulnerability affects Android versions from 9 to 14 running on security patch level 2024-06-01 or lower. A support matrix of tested devices can b...

Malicious code in supersignaturenature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1df02839294b29ff278b7a80505be50de75eb0f317f4bf29635236a75e4b15 The published dist/ bundles main/module/browser entrypoints contain code absent from the src/ tree: at library load they read an encrypted rsaToken...

MAL-2026-15560 Malicious code in supersignaturenature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1df02839294b29ff278b7a80505be50de75eb0f317f4bf29635236a75e4b15 The published dist/ bundles main/module/browser entrypoints contain code absent from the src/ tree: at library load they read an encrypted rsaToken...

CVE-2026-81097

The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...

EUVD-2026-67025

The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fixed improper pointer dereferencing when the error handler kthread is invalid. The commit 66a834d09293 “scsi: core: Fixed error handling of scsihostalloc” changed the allocation logic to call putdevice to perform hos...

Malicious code in @next-fonts/font (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e536e77176d5fb4637105c50280763e82a6a273dd7de35bb82da340b0f71163 @next-fonts/font is a typosquat of Next.js's @next/font. Its exported Inter function mimicking next/font/google decodes a base64 blob via atob, then...