CVE-2026-108757

Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts that skips the authToken check on POST /pinclaw/send. Unauthenticated attackers reaching port 18790, which binds all interfaces by default, can inject blind prompts int...

EUVD-2026-96922

Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts that skips the authToken check on POST /pinclaw/send. Unauthenticated attackers reaching port 18790, which binds all interfaces by default, can inject blind prompts int...

CVE-2026-108757

The Nexting pinclaw OpenClaw channel plugin, in versions through 0.3.0 , contains a missing authentication vulnerability in src/core/http-router.ts. The flaw occurs because the software fails to perform an authToken check on the POST /pinclaw/send endpoint. Because the service binds to all interf...

CVE-2026-108757: Missing Authentication for Critical Function

Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts that skips the authToken check on POST /pinclaw/send. Unauthenticated attackers reaching port 18790, which binds all interfaces by default, can inject blind prompts int...

CVE-2017-18790

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100...

CVE-2023-27343 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2019-18351

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-18790. Reason: This candidate is a duplicate of CVE-2019-18790. Notes: All CVE users should reference CVE-2019-18790 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

Debian: Security Advisory (DLA-2969-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2019-18351

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-18790. Reason: This candidate is a duplicate of CVE-2019-18790. Notes: All CVE users should reference CVE-2019-18790 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2019-18351

CVE-2019-18351 is a duplicate of CVE-2019-18790; the connected records provide concrete details for the underlying issue. Asterisk (Sangoma) 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1 (and Certified Asterisk 13.21 before cert5) contains a vulnerability in channels/chan_sip.c ...

CVE-2017-18790

creationtimestamp| type| source ---|---|--- 2020-04-21 23:29:25+00:00| seen| https://t.me/cibsecurity/11488...

CVE-2017-18790

CVE-2017-18790 affects certain NETGEAR routers (R6700 < 1.0.1.26, R7000 < 1.0.9.10, R7100LG < 1.0.0.32, R7900 < 1.0.1.18, R8000 < 1.0.3.54, R8500

Debian: Security Advisory (DLA-2017-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-18790

An issue was discovered in channels/chansip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5. A SIP request can be sent to Asterisk that can change a SIP peer's IP address. A REGISTER does not need to occur, and calls...

CVE-2019-18790

An issue was discovered in channels/chansip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5. A SIP request can be sent to Asterisk that can change a SIP peer's IP address. A REGISTER does not need to occur, and calls...

CVE-2019-18790

CVE-2019-18790ffects Sangoma Asterisk chan_sip.c: a SIP request can alter a peer’s IP address to hijack calls. Affected: Asterisk 13.x <13.29.2, 16.x <16.6.2, 17.x <17.0.1; Certified Asterisk

Asterisk Multiple Vulnerabilities (AST-2019-006, AST-2019-007)

Asterisk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if description...

CVE-2018-18790

CVE-2018-18790 affects ZZCMS 8.3. An SQL Injection exists in admin/special_add.php exploitable via the zxbigclassid cookie (admin login required). The issue can lead to partial disclosure/integrity/availability impact with high severity per CVSSv3 (HIGH for confidentiality, integrity, availabilit...