175 matches found
CVE-2024-28397-command-execution-poc
CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...
CVE-2024-28397
CVE-2024-28397 js2py Sandbox Escape Exploit - CodePartTwo - HTB A Python exploit code for CVE-2024-28397 , a critical vulnerability in js2py = 0.74 that allows sandbox escape and remote code execution. 🚨 Vulnerability Details CVE ID : CVE-2024-28397 Affected Software : js2py = 0.74 Severity :...
CVE-2023-36281
CVE-2023-36281 PoC of CVE-2023-36281 I referred to this PoC. Unfortunately, it doesn’t work because the indexes of subprocess.Popen are different in each Python environment. However, my PoC code addresses this problem. Installation $ pip install -r requirements.txt Execution 1. Get index of...
CVE-2026-67544
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...
EUVD-2026-124045
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...
CVE-2026-67544 Heym: Playwright Custom Code Backend RCE via `playwrightCode` Field
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...
CVE-2026-67544 Heym: Playwright Custom Code Backend RCE via `playwrightCode` Field
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...
CVE-2026-67544
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...
CVE-2026-67544
The Heym workflow engine is vulnerable to Remote Code Execution (RCE) in versions prior to 0.0.71 . The root cause is the lack of sandboxing, AST validation, or role gates when handling the playwrightCode field in a Playwright node. The engine accepts an arbitrary Python code string, writes it to...
Malicious code in aurum-pay (PyPI)
Source: amazon-inspector e2b0d2ac6f807a70e04fe3dc30654e40995911bc11ccaec948674e44e243f392 aurumpay/init.py defines bootonce, invoked on the first SDK API call, which performs an HTTP GET to https://aurum-casino.com/sdk/ping?p=&v=, reads the response body as a shell command string, and executes it...
MAL-2026-19147 Malicious code in aurum-pay (PyPI)
aurum-pay 1.2.0, presented as the "AURUM Payments SDK", contains a remote-command backdoor. On the first API call, AurumPay.request calls bootonce in aurumpay/init.py, commented as "SDK telemetry". It fetches https://aurum-casino.com/sdk/ping?p=&v=1.2.0 and runs the response body as a command: on...
Malicious code in aurum-pay (PyPI)
aurum-pay 1.2.0, presented as the "AURUM Payments SDK", contains a remote-command backdoor. On the first API call, AurumPay.request calls bootonce in aurumpay/init.py, commented as "SDK telemetry". It fetches https://aurum-casino.com/sdk/ping?p=&v=1.2.0 and runs the response body as a command: on...
PT-2026-145531
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...
CVE-2026-67544: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...
Malicious code in chromacli (PyPI)
Source: amazon-inspector faa55f651aa1c9e23d9cbff405b6ca52086c950c76e05e04b8dd49f74dd19959 The package presents itself as a terminal color library, but its exported API Color.paint / print / call contains an import-reachable Windows code path that downloads an unsigned executable from the anonymou...
Malicious code in chromacli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa55f651aa1c9e23d9cbff405b6ca52086c950c76e05e04b8dd49f74dd19959 The package presents itself as a terminal color library, but its exported API Color.paint / print / call contains an import-reachable Windows code pa...
Malicious code in qzc690382 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34d702840be6773d3d41444f836f45dab6a8e3524fcc8e4cd6d224ac3a77f1e The package body is inert init.py contains only c\n; the entire functionality lives in setup.py, which runs on pip install. During install, setup.py...
MAL-2026-18749 Malicious code in qzc690382 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34d702840be6773d3d41444f836f45dab6a8e3524fcc8e4cd6d224ac3a77f1e The package body is inert init.py contains only c\n; the entire functionality lives in setup.py, which runs on pip install. During install, setup.py...
CVE-2026-123022
A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be...
EUVD-2026-117439
A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be...