Vendor

HKUDS

3 briefs RSS

Remote Argument Injection in HKUDS nanobot

HKUDS nanobot versions up to 0.2.1 contain an argument injection vulnerability in the ExecTool component that allows remote attackers to execute arbitrary commands.

nanobot +1 vulnerability rce command-injection ssrf cloud-security

3t 1c updated 2d ago

critical advisory

HKUDS OpenHarness Remote Code Execution via /bridge Slash Command (CVE-2026-7551)

2 rules 1 TTP 1 CVE

HKUDS OpenHarness contains a remote code execution vulnerability (CVE-2026-7551) in the /bridge slash command, allowing remote attackers to execute arbitrary operating system commands by injecting malicious commands via the /bridge spawn command, leading to unauthorized shell access and data exposure.

OpenHarness rce vulnerability injection

2r 1t 1c Apr 30, 2026

critical advisory

HKUDS OpenHarness Plugin Management Vulnerability (CVE-2026-6819)

2 rules 3 TTPs 1 CVE

HKUDS OpenHarness before PR #156 allows remote attackers with channel layer access to manage plugin lifecycle commands, enabling unauthorized plugin installation and activation.

OpenHarness cve-2026-6819 plugin-vulnerability remote-code-execution

2r 3t 1c Jan 3, 2024