Lucene search
K

7 matches found

EUVD
EUVD
added 2026/04/10 12:30 a.m.1 views

EUVD-2026-21126

OpenClaw before 2026.3.22 contains a webhook path route replacement vulnerability in the Synology Chat extension that allows attackers to collapse multi-account configurations onto shared webhook paths. Attackers can exploit inherited or duplicate webhook paths to bypass per-account DM access...

6.3CVSS6AI score0.00042EPSS
Exploits0References5
NVD
NVD
added 2026/04/09 10:16 p.m.1 views

CVE-2026-35635

OpenClaw before 2026.3.22 contains a webhook path route replacement vulnerability in the Synology Chat extension that allows attackers to collapse multi-account configurations onto shared webhook paths. Attackers can exploit inherited or duplicate webhook paths to bypass per-account DM access...

6.5CVSS0.00042EPSS
Exploits0References4
CVE
CVE
added 2026/04/09 9:27 p.m.7 views

CVE-2026-35635

OpenClaw

6.5CVSS6AI score0.00042EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/04/09 9:27 p.m.14 views

CVE-2026-35635 OpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chat

OpenClaw before 2026.3.22 contains a webhook path route replacement vulnerability in the Synology Chat extension that allows attackers to collapse multi-account configurations onto shared webhook paths. Attackers can exploit inherited or duplicate webhook paths to bypass per-account DM access...

6.3CVSS0.00042EPSS
Exploits0References4
OSV
OSV
added 2025/05/26 11:41 a.m.0 views

USN-7525-2 Tomcat vulnerability

USN-7525-1 fixed CVE-2025-24813 for tomcat9 in Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. This update fixes it for tomcat9 in Ubuntu 24.04 LTS, Ubuntu 24.10, and Ubuntu 25.10. These versions include only the tomcat library libtomcat9-java and not the full tomcat server stack...

10CVSS7AI score0.9413EPSS
Exploits44References2
RedHat Linux
RedHat Linux
added 2023/10/31 2:6 p.m.2 views

goproxy: Denial of service (DoS) via unspecified vectors.

A flaw was found in goproxy, which is vulnerable to a denial of service caused by improper input validation. This flaw allows a remote attacker can cause the goproxy server to crash by sending a specially crafted HTTP request to the HTTPS page, replacing the path "/" with an asterisk ""...

7.5CVSS5.8AI score0.0018EPSS
Exploits1References7
seebug.org
seebug.org
added 2009/09/29 12:0 a.m.28 views

Adobe Photoshop Elements 8.0 Active File Monitor Privilege Escalation

No description provided by source. Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Tested on Microsoft Windows XP SP3 The "Adobe Active File Monitor V8" service i...

7.1AI score
Exploits0
Rows per page
Query Builder