aivr-blog (@j404)

Aaivr-blogaivr.hashnode.dev1h ago · 2 min read

Webmin Help Template Authenticated Remote Command Execution

Summary Webmin help system accepts template variables via query parameters and processes them through the eval function. This allows an authenticated user to execute commands with root privileges. How

0

Aaivr-blogaivr.hashnode.devJan 26 · 21 min read

Finding 0days with AI

For decades, many bug hunters and security pros have used manual testing, static analysis, and fuzzing to find vulnerabilities. Enter the age of AI. Many are skeptical, but when I look around I see mo

0

Aaivr-blogaivr.hashnode.devJan 23 · 3 min read

AwesomeBot meets MCP

Intro AwesomeBot is an awesome AI Chatbot! It was vibe coded from scratch to have a ton of awesome features without much security in mind so various attacks and offensive methods can be demonstrated. Today, AwesomeBot meets MCP. What happens next? Le...

0

Aaivr-blogaivr.hashnode.devJan 14 · 7 min read

AwesomeBot meets Prompt Injection

Intro AwesomeBot is an awesome AI Chatbot! It was vibe coded from scratch to have a ton of awesome features without much security in mind so various attacks and offensive methods can be demonstrated. This series of blog posts serves as a way to under...

0

Aaivr-blogaivr.hashnode.devJan 10 · 4 min read

LibreChat MCP Stdio Remote Command Execution

Summary LibreChat's Model Context Protocol (MCP) implementation contained a critical vulnerability (CVE-2026-22252) that allowed any authenticated user to gain root-level remote code execution (RCE) within the Docker container. A single API request c...

0

aivr-blog

About

Available for

aivr-blog's blogs

Recently published

Webmin Help Template Authenticated Remote Command Execution

Finding 0days with AI

AwesomeBot meets MCP

AwesomeBot meets Prompt Injection

LibreChat MCP Stdio Remote Command Execution

aivr-blog

About

Available for

aivr-blog's blogs

Recently published

Webmin Help Template Authenticated Remote Command Execution

Finding 0days with AI

AwesomeBot meets MCP

AwesomeBot meets Prompt Injection

LibreChat MCP Stdio Remote Command Execution

aivr-blog

About

Available for

aivr-blog's blogs

Recently published

Webmin Help Template Authenticated Remote Command Execution

Finding 0days with AI

AwesomeBot meets MCP

AwesomeBot meets Prompt Injection

LibreChat MCP Stdio Remote Command Execution

Search Hashnode

aivr-blog

About

Available for

aivr-blog's blogs

Recently published

Webmin Help Template Authenticated Remote Command Execution

Finding 0days with AI

AwesomeBot meets MCP

AwesomeBot meets Prompt Injection

LibreChat MCP Stdio Remote Command Execution