9601 matches found
CVE-2018-25314
creationtimestamp| type| source ---|---|--- 2026-04-29 20:25:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknwnpzlsb2o 2026-04-29 20:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknxfzyb4u2c...
CVE-2026-0204
creationtimestamp| type| source ---|---|--- 2026-04-29 19:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mknrwybg7h2w 2026-04-29 19:18:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mknsuzqutq2t 2026-04-30 06:01:26+00:00| seen|...
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for AIOps version 4.13.1 Vulnerability Details CVEID:CVE-2026-22737 DESCRIPTION: Use of Java scripting engine enabled e.g. JRuby, Jython template views in Spring MVC and Spring WebFlux applications can result in disclosure of conten...
CVE-2026-41940
creationtimestamp| type| source ---|---|--- 2026-04-29 11:21:48+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/al26-008-vulnerability-affecting-cpanel-webhost-manager-whm-cve-2026-41940 2026-04-29 16:21:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkniz3woo32i 2026-04-2...
The vulnerabilities of the functions trace_string() and trace_event_rawevent_synth() in the kernel/trace/trace_events_synth.c module, which support Linux’s kernel tracing mechanism, allow a hacker to cause a system failure.
The vulnerability of the tracestring and traceeventraweventsynth functions in the kernel/trace/traceeventssynth.c module, which support kernel tracing in Linux operating systems, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a system...
CVE-2026-7321
creationtimestamp| type| source ---|---|--- 2026-04-28 16:42:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkzpt3i4w2n 2026-04-28 17:04:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl2x5rxwl2r 2026-04-29 05:55:52+00:00| seen|...
Simplifying AWS defense with Microsoft Sentinel UEBA
In this article 1. Under the hood: The tables 2. Traditional vs. new approach 3. Real-world attack scenarios: Microsoft Sentinel UEBA in action 4. Practical implementation: Getting started 5. Limitations and constraints 6. From raw logs to behavioral context With the expansion of Microsoft Sentin...
CVE-2026-41362
OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated webhook targets. Attackers controlling one authenticated Zalo webhook path in multi-account deployments can suppress...
OpenClaw has an unspecified vulnerability (CNVD-2026-19026)
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to suppress legitimate events on different accounts by matching the eventname and messageid parameters...
OpenClaw 安全漏洞
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to suppress legitimate events on different accounts by matching the eventname and messageid parameters...
CVE-2026-39491
creationtimestamp| type| source ---|---|--- 2026-04-27 06:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkhh4z3mzy2c 2026-04-27 06:32:07+00:00| seen| https://bsky.app/profile/potato.software/post/3mkhh4zlgt525...
Linux Distros Unpatched Vulnerability : CVE-2026-31670
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: rfkill: prevent unlimited numbers of rfkill events from being created Userspace can create an unlimited number of rfkill events if the system is so...
net: rfkill: prevent unlimited numbers of rfkill events from being created
...
clockevents: Add missing resets of the next_event_forced flag
...
NPM: OpenClaw: Isolated cron awareness events were recorded as trusted system events
NPM: OpenClaw: Isolated cron awareness events were recorded as trusted system events vulnerability discovered by ? in WordPress Npm openclaw versions 2026.4.20...
Insufficient Verification of Data Authenticity
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the cron process. An attacker can cause untrusted events to be labeled as trusted system events by triggering isolated cron agent runs...
GHSA-57R2-H2WJ-G887 OpenClaw: Isolated cron awareness events were recorded as trusted system events
Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Output from webhook-triggered isolated cron agent runs could be queued into the main session awareness stream without trusted: false. That made the event render as a trusted...
OpenClaw: Isolated cron awareness events were recorded as trusted system events
Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Output from webhook-triggered isolated cron agent runs could be queued into the main session awareness stream without trusted: false. That made the event render as a trusted...
GHSA-72Q8-JCMC-97WX OpenClaw: Feishu card actions could misclassify DMs and skip dmPolicy
Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Feishu card-action callbacks could synthesize a message event with DM conversations classified as group conversations. That skipped dmPolicy enforcement for card actions, so a...
SUSE CVE-2026-31557
In the Linux kernel, the following vulnerability has been resolved: nvmet: move async event work off nvmet-wq For target nvmetctrlfree flushes ctrl-asynceventwork. If nvmetctrlfree runs on nvmet-wq, the flush re-enters workqueue completion for the same worker:- A. Async event work queued on...