CVE-2026-40093

creationtimestamp| type| source ---|---|--- 2026-04-09 23:29:02+00:00| published-proof-of-concept| Telegram/nXzIQMxPCOAGX3i8onWM2mwWKDsz1vr3NClJO7twhRFOo 2026-04-10 08:04:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4uehnf2y2r 2026-04-10 08:04:28+00:00| seen|...

CVE-2019-25669

creationtimestamp| type| source ---|---|--- 2026-04-09 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj3wdnyeyi2u 2026-04-10 02:29:15+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mj4bn3n3ux2s...

CVE-2026-29145

creationtimestamp| type| source ---|---|--- 2026-04-09 22:38:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj3uqtva4c2s 2026-04-10 12:50:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj5ediuo5m2z 2026-04-10 21:23:45+00:00| seen|...

CVE-2026-24880

creationtimestamp| type| source ---|---|--- 2026-04-09 22:23:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj3tvzsm252s 2026-04-10 12:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj5ediuo5m2z 2026-04-10 21:23:45+00:00| seen|...

CVE-2026-35639

creationtimestamp| type| source ---|---|--- 2026-04-09 22:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3tqrmla32o 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo 2026-04-10 07:11:26+00:00| seen|...

CVE-2026-29146

creationtimestamp| type| source ---|---|--- 2026-04-09 21:01:14+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mj3pckzmjc2j 2026-04-09 22:48:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj3vcs73fa25 2026-04-09 23:23:44+00:00| seen|...

CVE-2026-39942

creationtimestamp| type| source ---|---|--- 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ 2026-04-09 20:04:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3m5nlceo2i 2026-04-12 11:00:16+00:00| seen|...

OpenClaw `node.invoke(browser.proxy)` bypasses `browser.request` persistent profile-mutation guard

Impact OpenClaw node.invokebrowser.proxy bypasses browser.request persistent profile-mutation guard. node.invokebrowser.proxy could mutate persistent browser profiles through a path that bypassed the browser.request guard. OpenClaw is a user-controlled local assistant. This advisory is scoped to...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the node.invoke process. An attacker can alter persistent browser profiles by invoking browser.proxy to bypass the intended profile-mutation guard. Remediation...

GHSA-CMFR-9M2R-XWHQ OpenClaw `node.invoke(browser.proxy)` bypasses `browser.request` persistent profile-mutation guard

Impact OpenClaw node.invokebrowser.proxy bypasses browser.request persistent profile-mutation guard. node.invokebrowser.proxy could mutate persistent browser profiles through a path that bypassed the browser.request guard. OpenClaw is a user-controlled local assistant. This advisory is scoped to...

CVE-2026-5850

creationtimestamp| type| source ---|---|--- 2026-04-09 06:38:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj273dzwsg27 2026-04-09 07:02:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj2agpebym2s 2026-04-09 07:17:34+00:00| published-proof-of-concept|...

PT-2026-32543

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-44 ImageMagick versions prior to 7.1.2-19 Description A heap use-after-free issue occurs when reading and printing values from an invalid XMP profile, which can lead to a crash. Recommendations Update to...

CVE-2026-1830

creationtimestamp| type| source ---|---|--- 2026-04-08 20:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-1830 2026-04-09 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mizxwyinu42y 2026-04-09 04:30:30+00:00| seen|...

OpenClaw has an unspecified vulnerability (CNVD-2026-16694)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that can be exploited by an attacker to cause an authenticated operator with only operator.write privileges to access the administrator-specific browser profile management rout...

CVE-2026-25776

creationtimestamp| type| source ---|---|--- 2026-04-07 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN66473735/ 2026-04-08 10:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixzvm5wfr2x 2026-04-08 10:00:29+00:00| seen|...

CVE-2026-5373

creationtimestamp| type| source ---|---|--- 2026-04-07 15:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miw3fhd5xt24 2026-04-07 15:26:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miw3nygswh2w 2026-04-07 17:29:14+00:00| published-proof-of-concept|...

CVE-2026-34896

creationtimestamp| type| source ---|---|--- 2026-04-07 10:10:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mivjymbw6f2s 2026-04-07 10:30:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mivl4qvjwe2n 2026-04-07 13:55:24+00:00| seen|...

CVE-2025-65115

creationtimestamp| type| source ---|---|--- 2026-04-07 06:17:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miv4ydiw5t2w 2026-04-07 06:25:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miv5gbsvfj27 2026-04-07 07:09:46+00:00| seen|...

PT-2026-30942

ChurchCRM is an open-source church management system. Prior to 7.0.0, a stored cross-site scripting XSS vulnerability exists in ChurchCRM within the Person Property Management subsystem. This issue persists in versions patched for CVE-2023-38766 and allows an authenticated user to inject arbitrar...

CVE-2026-35171

creationtimestamp| type| source ---|---|--- 2026-04-06 18:24:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitv4ynlvh2d 2026-04-06 18:24:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitv5qkfjp2d 2026-04-06 19:29:44+00:00| seen|...