Remote code execution in OpenSSH’s forwarded SSH-agent(blog.qualys.com)

233 points by vitplister 3 years ago | 140 comments

Remote Unauthenticated Code Execution in OpenSSH Server(blog.qualys.com)

30 points by m1guelpf 2 years ago | 8 comments

Accessing private GitHub repositories via MCP(invariantlabs.ai)

98 points by gokhan 1 year ago | 25 comments

GitHub MCP exploited: Accessing private repositories via MCP(invariantlabs.ai)

477 points by andy99 1 year ago | 287 comments

Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution(xint.io)

13 points by eyalitki 5 months ago | 2 comments

Abusing Ubuntu 24.04 features for root privilege escalation(snyk.io)

157 points by saltypal 1 year ago | 67 comments