CVE-2024-28397

CVE-2024-28397 js2py 沙箱逃逸漏洞利用 - CodePartTwo - HTB 用于 CVE-2024-28397 的 Python 漏洞利用代码，这是 js2py = 0.74 中的一个严重漏洞，允许沙箱逃逸和远程代码执行。 🚨 漏洞详情 CVE ID : CVE-2024-28397 受影响软件 : js2py = 0.74 严重程度 : 严重 CVSS 9.8 类型 : 沙箱逃逸 / 远程代码执行 发现日期 : 2024 年 2 月 描述 js2py 是一个流行的 Python 库，用于在 Python 环境中评估 JavaScript 代码。该漏洞允许攻击者逃...

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc Esta vulnerabilidad surge de un sandboxing incompleto en js2py, donde un JavaScript manipulado puede recorrer el modelo de objetos interno de Python y acceder a clases peligrosas como subprocess.Popen, lo que conduce a la ejecución arbitraria de comandos...

CVE-2026-93965

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...

CVE-2026-93965 aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...

CVE-2026-93965 aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...

CVE-2026-93965

A command injection vulnerability exists in aiyiyi121 SxDevOps versions 1.0 and 1.1 , specifically in the MCP STDIO Server Management component. The flaw resides in the subprocess.Popen call within backend/aiops/services.py, where unsanitized input through the endpoint_or_command argument allows ...

CVE-2023-36281

CVE-2023-36281 CVE-2023-36281 的 PoC 我参考了 这个 PoC。不幸的是，它不能正常工作，因为 subprocess.Popen 的索引在每个 Python 环境中是不同的。不过，我的 PoC 代码解决了这个问题。 安装 $ pip install -r requirements.txt 运行 1. 在您自己的环境中获取 subprocess 的索引，因为每个环境可能会有所不同。 输入 $ python getindexofsubprocess.py 输出 root@kitploit: subprcess.Popen index: 309. Replace...

CVE-2026-90690

A weakness has been identified in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The affected element is the function subprocess.Popen of the file hexstrikeserver.py of the component API Tools Endpoint. Executing a manipulation of the argument...

CVE-2026-90690 0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection

A weakness has been identified in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The affected element is the function subprocess.Popen of the file hexstrikeserver.py of the component API Tools Endpoint. Executing a manipulation of the argument...

EUVD-2026-77215

A weakness has been identified in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The affected element is the function subprocess.Popen of the file hexstrikeserver.py of the component API Tools Endpoint. Executing a manipulation of the argument...

CVE-2026-90690

0x4m4 HexStrike AI (up to commit d689933ff579d839c676c82b231f8e98326c5f04) is vulnerable to OS command injection in the API Tools Endpoint component. The flaw resides in the subprocess.Popen call within hexstrike_server.py, where manipulation of arguments such as additional_args, target, username...

CVE-2026-72776

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...

CVE-2026-72776 AgenticSeek Unauthenticated RCE via /query API Endpoint

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...

CVE-2026-72776

CVE-2026-72776 affects AgenticSeek and describes an unauthenticated remote code execution via the unprotected POST /query API endpoint (bound to 0.0.0.0:7777 with wildcard CORS). An attacker can send crafted queries to trigger the agent to generate and execute shell commands through BashInterpret...

EUVD-2024-0929

Malicious code in bioql PyPI...

EUVD-2024-32817

Malicious code in bioql PyPI...

CVE-2025-4032 inclusionAI AWorld shell_tool.py subprocess.Popen os command injection

A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as critical. This issue affects the function subprocess.run/subprocess.Popen of the file AWorld/aworld/virtualenvironments/terminals/shelltool.py. The manipulation leads to os command...

CVE-2025-4032 inclusionAI AWorld shell_tool.py subprocess.Popen os command injection

A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as critical. This issue affects the function subprocess.run/subprocess.Popen of the file AWorld/aworld/virtualenvironments/terminals/shelltool.py. The manipulation leads to os command...

CVE-2024-9920 Unrestricted File Upload and Execution in parisneo/lollms-webui

In version v12 of parisneo/lollms-webui, the 'Send file to AL' function allows uploading files with various extensions, including potentially dangerous ones like .py, .sh, .bat, and more. Attackers can exploit this by uploading files with malicious content and then using the '/openfile' API...

CVE-2024-53992 unzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video upload

unzip-bot is a Telegram bot to extract various types of archives. Users could exploit unsanitized inputs to inject malicious commands that are executed through subprocess.Popen with shell=True. Attackers can exploit this vulnerability using a crafted archive name, password, or video name. This...