3450 matches found
CVE-2026-45000
OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass security policies and are later probed durin...
CVE-2026-45000 OpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation
OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass security policies and are later probed durin...
CVE-2026-45000
OpenClaw before 2026.4.20 is affected by a server-side request forgery in the browser CDP profile creation flow. The vulnerability allows creation of stored profiles that can point to private-network or metadata endpoints and bypass strict-mode SSRF policy checks, with the sensitive endpoints pot...
CVE-2026-25244
creationtimestamp| type| source ---|---|--- 2026-05-11 14:43:50+00:00| published-proof-of-concept| https://github.com/webdriverio/webdriverio/security/advisories/GHSA-5c46-x3qw-q7j7 2026-05-19 22:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmafn7z22w2u 2026-05-20 14:50:44+00:0...
CVE-2025-10470
creationtimestamp| type| source ---|---|--- 2026-05-11 12:28:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllbkwuvla2e 2026-05-11 12:30:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllboi27ef2i 2026-05-12 11:39:41+00:00| seen|...
CERTFR-2026-ACT-021
creationtimestamp| type| source ---|---|--- 2026-05-11 12:08:19+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mllah4ffi42y 2026-05-11 12:08:27+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116555861087874714 2026-05-11 16:34:25+00:00| seen|...
CVE-2026-6433
creationtimestamp| type| source ---|---|--- 2026-05-11 06:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkntaovtw2e 2026-05-11 07:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlkqwfikpf2f 2026-05-11 07:30:41+00:00| seen|...
Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8243-1)
"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8243-1 advisory. Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these...
CVE-2026-38568
HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/ and /interview/ endpoints. The route handlers retrieve records by the user-supplied ID without verifying that the requesting user is the owner or has an authoriz...
Ubuntu 25.10 / 26.04 LTS : Little CMS vulnerability (USN-8250-1)
The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8250-1 advisory. It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could possibly use this issue to cause Little CMS to...
CVE-2026-8177
creationtimestamp| type| source ---|---|--- 2026-05-10 23:10:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mljuyplz5e2o 2026-05-10 23:51:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mljxawslek2b 2026-05-11 15:47:14+00:00| seen|...
CVE-2026-41584
creationtimestamp| type| source ---|---|--- 2026-05-08 18:50:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlefivlihl2r 2026-05-08 19:04:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlegbnfjvt26...
CVE-2026-6213
creationtimestamp| type| source ---|---|--- 2026-05-08 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116538489534406589 2026-05-08 10:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mldjlhz44r2o 2026-05-08 10:55:38+00:00| seen|...
CVE-2025-14341
creationtimestamp| type| source ---|---|--- 2026-05-07 16:54:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlbokdfb3v2e 2026-05-07 17:09:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpgsdmla2z 2026-09-12 10:00:13+00:00| seen|...
USN-8250-1 lcms2 vulnerability
It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could possibly use this issue to cause Little CMS to crash, resulting in a denial of service...
USN-8250-1: Little CMS vulnerability
It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could possibly use this issue to cause Little CMS to crash, resulting in a denial of service...
CVE-2025-1978
creationtimestamp| type| source ---|---|--- 2026-05-07 11:09:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlb3cyfts22f 2026-05-07 11:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlb46drpmy2o 2026-05-07 21:53:41+00:00| seen|...
USN-8243-1 linux-azure-5.15 vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
USN-8243-1: Linux kernel (Azure) vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
CVE-2026-41139
creationtimestamp| type| source ---|---|--- 2026-05-07 08:24:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlas3kpzvu2w 2026-05-07 09:57:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlaxbusqcm2q 2026-05-08 00:00:06+00:00| seen|...