23248 matches found
CVE-2026-44113
creationtimestamp| type| source ---|---|--- 2026-05-06 21:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7octvlei2p 2026-05-19 18:30:06+00:00| seen| https://t.me/truesecator/8221...
EUVD-2026-28170
OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile setting...
CVE-2026-41936
creationtimestamp| type| source ---|---|--- 2026-05-06 20:46:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2uurfe2n...
CVE-2026-46366
creationtimestamp| type| source ---|---|--- 2026-05-06 20:45:01+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-99qv-g4x9-mgc3 2026-05-15 21:44:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwcjmu7ci2n 2026-05-16 15:00:22+00:00| seen|...
CVE-2026-44110
creationtimestamp| type| source ---|---|--- 2026-05-06 20:43:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kuxuy7f2k 2026-05-06 22:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7pyc3rbz2c 2026-05-08 10:07:08+00:00| seen|...
CVE-2026-44118
creationtimestamp| type| source ---|---|--- 2026-05-06 20:39:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kotwoxb2z 2026-05-06 22:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7qv4ohew2q 2026-05-19 18:30:06+00:00| seen|...
CVE-2026-4024
creationtimestamp| type| source ---|---|--- 2026-05-06 20:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml7kd4zsiu2u...
CVE-2026-43579
OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile setting...
CVE-2026-43579
CVE-2026-43579 affects OpenClaw prior to 2026.4.10, with an insufficient access control flaw in the Nostr plugin HTTP profile mutation routes. Operators with write permissions can persist profile configuration without admin authority by abusing unprotected mutation endpoints, enabling unauthorize...
CVE-2026-43579
OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile setting...
CVE-2026-43579 OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes
OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile setting...
CVE-2026-43579 OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes
OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile setting...
CVE-2026-43579 OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes
OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile setting...
CSV Injection
Overview Affected versions of this package are vulnerable to CSV Injection via the export function. An attacker can execute arbitrary spreadsheet formulas in the context of an administrator's local machine by injecting formula payloads into profile fields, which are then exported and opened in...
CVE-2026-5324
creationtimestamp| type| source ---|---|--- 2026-05-06 19:33:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml7gxtpxis2a...
CVE-2026-8028
creationtimestamp| type| source ---|---|--- 2026-05-06 18:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7cuo4hcs2e...
CVE-2025-31982
creationtimestamp| type| source ---|---|--- 2026-05-06 18:05:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7c2yrnok2i...
CVE-2026-7992
creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-06 23:03:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7spinzvu2l 2026-05-07 18:00:00+00:00|...
CVE-2026-8000
creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-07 01:42:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla3m7cje22k...