Forwarded from HAT's Public Channel | 🫪
⚠️安全预警：知名 LookingGlass 程序 HyperGlass 爆出大量极高危安全漏洞，并已出现在野利用，请各位 ISP NOC 尽快修补漏洞/阻断公网访问

*当前官方仍未完全修复所有安全漏洞，建议直接阻断访问

完整 POC 已公开： https://hyperpwn.xyz/
hyperpwn.xyz
One unescaped str.format(): 36 ISP and hosting footholds from a public looking glass
An unauthenticated command injection in hyperglass /api/query, and the 36 ISP and hosting footholds behind it.