Lucene search
K

7 matches found

Positive Technologies
Positive Technologies
added 3 days ago5 views

PT-2026-45480

Name of the Vulnerable Software and Affected Versions pip affected versions not specified Description pip fails to sanitize the resolved absolute path to the installation directory when treating console scripts and gui scripts as paths rather than file names. This allows entry points to be...

4.1CVSS5.8AI score0.00013EPSS
Exploits0References5
HackRead
HackRead
added 2026/04/28 11:1 a.m.3 views

Why Unofficial Download Sources Are Still a Security Risk in 2026

Security Risk in 2026: why unofficial download sources still put users at risk, and how to verify safe, official install paths before installing software...

5.3AI score
Exploits0
OSV
OSV
added 2026/03/03 9:20 p.m.3 views

GHSA-3PXQ-F3CP-JMXP OpenClaw: Unified root-bound write hardening for browser output and related path-boundary flows

Summary A path-confinement bypass in browser output handling allowed writes outside intended roots in openclaw versions up to and including 2026.3.1. The fix unifies root-bound, file-descriptor-verified write semantics and canonical path-boundary validation across browser output and related...

5.3CVSS5.8AI score0.00021EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/03/03 9:20 p.m.14 views

OpenClaw: Unified root-bound write hardening for browser output and related path-boundary flows

Summary A path-confinement bypass in browser output handling allowed writes outside intended roots in openclaw versions up to and including 2026.3.1. The fix unifies root-bound, file-descriptor-verified write semantics and canonical path-boundary validation across browser output and related...

5.3CVSS5.8AI score0.00021EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.1 views

PT-2026-26011

Summary A path-confinement bypass in browser output handling allowed writes outside intended roots in openclaw versions up to and including 2026.3.1. The fix unifies root-bound, file-descriptor-verified write semantics and canonical path-boundary validation across browser output and related...

5.3CVSS5.8AI score0.00021EPSS
Exploits0References9
ATTACKERKB
ATTACKERKB
added 2018/03/02 10:29 p.m.3 views

CVE-2015-7962

SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

7.8CVSS5.5AI score0.0006EPSS
Exploits0References6
Exploit DB
Exploit DB
added 2012/08/09 12:0 a.m.28 views

Cyclope Employee Surveillance Solution 6.0/6.1.0/6.2.0/6.2.1/6.3.0 - SQL Injection

Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution v6.0 Version: 6.0 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.html Software description: The employee monitoring software developed by...

7.4AI score
Exploits0
Rows per page
Query Builder