Lucene search
+L

252 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•1 views

CVE-2026-5573: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. This impacts an unknown function of the file /fs. Executing a manipulation of the argument cwd can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made available to the public an...

9.8CVSS5.4AI score0.00704EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2026/03/26 3:10 p.m.•12 views

CVE-2026-32043

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...

7CVSS6.3AI score0.00132EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/21 3:31 a.m.•13 views

EUVD-2026-13935

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...

6.5CVSS6.3AI score0.00132EPSS
SaveExploits0References4
NVD
NVD
•added 2026/03/21 1:17 a.m.•10 views

CVE-2026-32043

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...

7CVSS0.00132EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/21 12:42 a.m.•41 views

CVE-2026-32043 OpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameter

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...

6.5CVSS0.00132EPSS
SaveExploits0References3
OSV
OSV
•added 2026/03/21 12:42 a.m.•11 views

CVE-2026-32043 OpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameter

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...

5.8CVSS6.3AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/03/21 12:42 a.m.•5 views

CVE-2026-32043 OpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameter

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...

6.5CVSS6.3AI score0.00132EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/21 12:00 a.m.•11 views

PT-2026-26726

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...

6.5CVSS6.3AI score0.00132EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/21 12:00 a.m.•0 views

CVE-2026-32043: Time-of-check Time-of-use (TOCTOU) Race Condition

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...

7CVSS6.3AI score0.00132EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/19 2:16 a.m.•20 views

CVE-2026-31999

OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers to influence execution behavior through cwd manipulation. Remote attackers can exploit improper shell execution...

7.8CVSS0.00373EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/19 1:00 a.m.•6 views

CVE-2026-31999 OpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution Fallback

OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers to influence execution behavior through cwd manipulation. Remote attackers can exploit improper shell execution...

6.3CVSS6AI score0.00373EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/06 1:12 p.m.•16 views

Malicious code in python-requirements (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 40fa77c47c3649fce85f601f8aa10bf13674e5db4a2d35f125cb48b77d65f99d The package clones a legitimate webdavclient3 library and modifies it to be an installer utility. During installation, the package exfiltrates the current...

5.8AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/03/03 7:18 p.m.•23 views

OpenClaw's system.run approval TOCTOU via mutable symlink cwd target on node host

Summary In [email protected], approval-bound system.run on node hosts could be influenced by mutable symlink cwd targets between approval and execution. Details Approval matching on the gateway validated command/argv and binding fields, including cwd, as provided text. Node execution later used...

7CVSS6.1AI score0.00132EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2026/03/02 9:55 p.m.•22 views

CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths

Summary On Windows ACPX paths, wrapper resolution for .cmd/.bat could fall back to shell execution in ways that allowed cwd influence to alter execution behavior. Impact In affected Windows ACPX configurations, this could enable command execution integrity loss through cwd-influenced wrapper...

7.8CVSS6.1AI score0.00373EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/03/02 9:55 p.m.•16 views

GHSA-6F6J-WX9W-FF4J CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths

Summary On Windows ACPX paths, wrapper resolution for .cmd/.bat could fall back to shell execution in ways that allowed cwd influence to alter execution behavior. Impact In affected Windows ACPX configurations, this could enable command execution integrity loss through cwd-influenced wrapper...

9.3CVSS6.1AI score0.00373EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/03/02 12:00 a.m.•17 views

PT-2026-26239

Summary On Windows ACPX paths, wrapper resolution for .cmd/.bat could fall back to shell execution in ways that allowed cwd influence to alter execution behavior. Impact In affected Windows ACPX configurations, this could enable command execution integrity loss through cwd-influenced wrapper...

9.3CVSS6AI score0.00373EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•0 views

CVE-2026-25129: Uncontrolled Search Path Element

PsySH is a runtime developer console, interactive debugger, and REPL for PHP. Prior to versions 0.11.23 and 0.12.19, PsySH automatically loads and executes a .psysh.php file from the Current Working Directory CWD on startup. If an attacker can write to a directory that a victim later uses as thei...

7.3CVSS6.5AI score0.00298EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:40 a.m.•16 views

CVE-1999-0082

CWD root command in ftpd allows root access...

10CVSS7.1AI score0.08281EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:40 a.m.•10 views

CVE-1999-0671

Buffer overflow in ToxSoft NextFTP client through CWD command...

5.1CVSS7.3AI score0.01748EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2005-0959

Malware in sbrugna...

7.5CVSS6.4AI score0.04434EPSS
SaveExploits2References5
Rows per page
Query Builder