agentsh

agentsh Nota para macOS: La aplicación nativa de enforcement en macOS mediante ESF Endpoint Security Framework + NE Network Extension está en Alpha. Funciona de extremo a extremo: los eventos de archivos, procesos y red fluyen a través de la extensión del sistema hasta el motor de políticas Go,...

enject

enject 将 .env 机密隐藏，远离 AI 的窥探。 （注意：该项目原先名为 enveil，现已更名为 enject） AI 编码工具（如 Claude Code、Copilot、Cursor 等）可以读取项目目录中的文件，这意味着纯文本格式的 .env 文件就像一颗随时可能引爆的秘密泄露炸弹。这并非理论上的问题。这是一个已知问题，我曾多次遇到（即使在 Claude Code 的 settings.json 中明确告诉 Claude 不要偷看）。enject 通过确保明文的秘密绝不被存储在磁盘上 来解决这个问题。你的 .env...

PIL-CVE-2017-8291

Vulnerabilidad de ejecución remota de comandos en Python PIL GhostButt El módulo PIL Pillow para procesar imágenes en Python se ve afectado por la vulnerabilidad GhostButt CVE-2017-8291 porque llama internamente a GhostScript, lo que resulta en una vulnerabilidad de ejecución remota de comandos...

CVE-2026-85674

aider (aider-chat) is a CLI-based AI coding assistant that automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed at startup) or lint-cmd (executed on the first file edit), both of which are e...

CVE-2024-29973

CVE-2024-29973 root@kitploit: GET /cmd,/simZysh/registermain/setCookie?c0=storageextcgi+CGIGetExtStoInfo+None+and+False+or+import"subprocess".checkoutput"id",+shell=True%23 HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept: / Accept-Languag...

StegCracker

StegCracker Utilidad de fuerza bruta de esteganografía para descubrir datos ocultos dentro de archivos. ¿Buscas el repositorio de Docker? Puedes encontrarlo aquí Obsoleto Deja de perder tiempo y CPU, ¡usa stegseek en su lugar! ¿No estás convencido? Mira estos benchmarks robados con cariño:...

reNgine 2.2.0 - Command Injection

reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/wafdetector/?url= string. The commands are executed as root via subprocess.checkoutput. id: CVE-2023-50094 info: name: reNgine 2.2.0 - Command Injection...

GHSA-756X-9HF6-Q4H4 Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools

Summary An authenticated user can upload a crafted agent bundle that defines a server-side Python callable tool. The server validates the uploaded bundle, but it does not block dangerous callable: paths in untrusted user-provided agent configs. When the tool is invoked, the runner imports and...

GHSA-M4RF-3FR8-XWX3 NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)

Vulnerability The fix for CVE-2026-12841 CWE-88, JVM argument injection added validatejavaoptions to block dangerous JVM flags such as -agentlib, -agentpath, -javaagent, -Xrunjdwp, and @argfile references. However, the validation is only applied when setting global options via configjava. The jav...

CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 describe una vulnerabilidad de OS Command Injection Inyección de Comandos del Sistema presente en el software My Computer del sistema operativo Pardus. Esta vulnerabilidad permite a un usuario inyectar comandos del sistema a través del parámetro de nombre de archivo,...

CVE-2026-76054

Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which is inherited by subprocesses launched...

EUVD-2026-64894

Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which is inherited by subprocesses launched...

Malicious code in mcq-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acf694ae0258defc54c414980c5f8512b7055e69630ede15a8bfb37d2005b9b On any require/import of mcq-session, the main module runs a top-level async IIFE that reads a file at../../../../public/logo.ico a path escaping the...

CVE-2026-54449

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

CVE-2026-54449 LangBot: Authenticated RCE Via MCP Configuration

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

CVE-2026-75149

marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...

EUVD-2026-62665

marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...

CVE-2026-75149 marimo < 0.23.15 Code Injection via MCP Server Configuration

marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...

CVE-2026-75149 marimo < 0.23.15 Code Injection via MCP Server Configuration

marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...

CVE-2026-76217

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...