231629 matches found
CVE-2026-18038 nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure
A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function ExecTool.Execute of the file goclaw/internal/http/toolsinvoke.go of the component jq Handler. Executing a manipulation can lead to information disclosure. The attack can be launched...
Exploit for CVE-2026-61511
No d...
Exploit for CVE-2026-64725
cve-202...
Root-My-Device-Payloads
Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...
Exploit for CVE-2026-64600
No d...
CVE-2026-16585
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesticker function in all versions up to, and including, 2.15.19. This makes it possible for authenticate...
Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware
SELinux-Permissive-Only-version-of-Cheese-aka...
Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware
SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 T...
Exploit for Improper Authorization in Microsoft
No d...
Linux Distros Unpatched Vulnerability : CVE-2026-51304
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlite 3.41 has a use-after-free UAF vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via...
PT-2026-65617
Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions 0.11.6 through 0.63.0 Description A flaw in the handling of schema extensions allows for remote code execution on the machine that imports the generated model. When processing a malicious OpenAPI or JSON Schem...
CVE-2026-51274
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Exploit for Interpretation Conflict in Wordpress
wp2shell-hestia-scanner Read-only WordPress security scanner...
Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six
No d...
Incorrect Authorization
Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Incorrect Authorization via the req.functool argument in the astrmainagent.py process. An attacker can gain unauthorized access to restricted functionality and perform actions with elevated privileges...
Incorrect Authorization
Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Incorrect Authorization via the function buildhandofftoolset in the file AstrBot/astrbot/core/astragenttoolexec.py of the component Subagent. The manipulation results in incorrect authorization. The...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499-pgp110 CVE-2026-43499 futex PI rtmutex...
CVE-2026-51296
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-17529
A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astrmainagent.py. The manipulation of the argument req.functool leads to incorrect authorization. The attack may be initiated remotely. The exploit is publicly available an...