<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>RCE on Ming Blog</title>
    <link>https://puming.zone/tags/rce/</link>
    <description>Recent content in RCE on Ming Blog</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en-us</language>
    <lastBuildDate>Sat, 28 Feb 2026 00:00:00 +0000</lastBuildDate>
    
	<atom:link href="https://puming.zone/tags/rce/index.xml" rel="self" type="application/rss+xml" />
    
    
    <item>
      <title>OpenClaw近期生态安全事件解读：从RCE漏洞到Skill供应链投毒分析</title>
      <link>https://puming.zone/post/2026-02-28-openclaw%E8%BF%91%E6%9C%9F%E7%94%9F%E6%80%81%E5%AE%89%E5%85%A8%E4%BA%8B%E4%BB%B6%E8%A7%A3%E8%AF%BB%E4%BB%8Erce%E6%BC%8F%E6%B4%9E%E5%88%B0skill%E4%BE%9B%E5%BA%94%E9%93%BE%E6%8A%95%E6%AF%92%E5%88%86%E6%9E%90/</link>
      <pubDate>Sat, 28 Feb 2026 00:00:00 +0000</pubDate>
      
      <guid>https://puming.zone/post/2026-02-28-openclaw%E8%BF%91%E6%9C%9F%E7%94%9F%E6%80%81%E5%AE%89%E5%85%A8%E4%BA%8B%E4%BB%B6%E8%A7%A3%E8%AF%BB%E4%BB%8Erce%E6%BC%8F%E6%B4%9E%E5%88%B0skill%E4%BE%9B%E5%BA%94%E9%93%BE%E6%8A%95%E6%AF%92%E5%88%86%E6%9E%90/</guid>
      <description>作者：星云实验室 浦明 引言 2025年底至2026年初的技术演进历程中，AI领域经历了一场从对话式向自主式智能代理的转变。在这一技术浪潮中，由开</description>
    </item>
    
    <item>
      <title>OpenClaw安全实战系列(二)：白名单也防不住？复盘 CVE-2026-28363 授权绕过全过程</title>
      <link>https://puming.zone/post/2026-02-22-openclaw%E5%AE%89%E5%85%A8%E5%AE%9E%E6%88%98%E7%B3%BB%E5%88%97%E4%BA%8C%E7%99%BD%E5%90%8D%E5%8D%95%E4%B9%9F%E9%98%B2%E4%B8%8D%E4%BD%8F%E5%A4%8D%E7%9B%98cve-2026-28363%E6%8E%88%E6%9D%83%E7%BB%95%E8%BF%87%E5%85%A8%E8%BF%87%E7%A8%8B/</link>
      <pubDate>Sun, 22 Feb 2026 00:00:00 +0000</pubDate>
      
      <guid>https://puming.zone/post/2026-02-22-openclaw%E5%AE%89%E5%85%A8%E5%AE%9E%E6%88%98%E7%B3%BB%E5%88%97%E4%BA%8C%E7%99%BD%E5%90%8D%E5%8D%95%E4%B9%9F%E9%98%B2%E4%B8%8D%E4%BD%8F%E5%A4%8D%E7%9B%98cve-2026-28363%E6%8E%88%E6%9D%83%E7%BB%95%E8%BF%87%E5%85%A8%E8%BF%87%E7%A8%8B/</guid>
      <description>作者：星云实验室 浦明 关键词：Agentic AI 安全；OpenClaw 漏洞；CVE-2026-28363；命令注入 RCE；POSIX 绕过 摘要 本文</description>
    </item>
    
    <item>
      <title>从环境构建到漏洞利用：如何用Metarget和Coogo复现K8s IngressNightmare攻击链</title>
      <link>https://puming.zone/post/2025-03-29-%E4%BB%8E%E7%8E%AF%E5%A2%83%E6%9E%84%E5%BB%BA%E5%88%B0%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8%E5%A6%82%E4%BD%95%E7%94%A8metarget%E5%92%8Ccoogo%E5%A4%8D%E7%8E%B0k8s-ingressnightmare%E6%94%BB%E5%87%BB%E9%93%BE/</link>
      <pubDate>Fri, 28 Mar 2025 00:00:00 +0000</pubDate>
      
      <guid>https://puming.zone/post/2025-03-29-%E4%BB%8E%E7%8E%AF%E5%A2%83%E6%9E%84%E5%BB%BA%E5%88%B0%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8%E5%A6%82%E4%BD%95%E7%94%A8metarget%E5%92%8Ccoogo%E5%A4%8D%E7%8E%B0k8s-ingressnightmare%E6%94%BB%E5%87%BB%E9%93%BE/</guid>
      <description>一．概述 Ingress Controller作为K8s集群管理外部访问的核心组件，承担着集群入口网关的关键角色，其通过智能路由机制将外部HTTP/HTTP</description>
    </item>
    
  </channel>
</rss>