Lucene search
+L

972671 matches found

CVE
CVE
added 3 days ago25 views

CVE-2026-19007

CVE-2026-19007 affects mf-yang openclaw-cn up to version 0.2.1, stemming from the isApprovedElevatedSender function in src/auto-reply/reply/reply-elevated.ts, causing improper privilege management. The vulnerability can be triggered remotely and has publicly disclosed exploit information. The pro...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 3 days ago6 views

CVE-2026-19006

A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 3 days ago22 views

CVE-2026-19006

The CVE affects mf-yang openclaw-cn 2026.2.5, specifically the Ggateway Exec Approval Flow component, with the vulnerability located in src/agents/bash-tools.exec.ts. The manipulation leads to incorrect authorization and can be exploited remotely; exploitation is public. The project was informed ...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References6
Cvelist
Cvelist
added 3 days ago33 views

CVE-2026-19006 mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization

A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made...

6.5CVSS0.00209EPSS
SaveExploits0References6
EUVD
EUVD
added 3 days ago7 views

EUVD-2026-53730

A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References6
OSV
OSV
added 3 days ago5 views

CVE-2026-19006 mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization

A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made...

5.3CVSS5AI score
SaveExploits0References8
RedhatCVE
RedhatCVE
added 3 days ago8 views

CVE-2026-18785

A flaw was found in open62541. A local attacker can exploit a use-after-free vulnerability in the UAClientgetRemoteDataTypes function by performing a specific manipulation. This could potentially lead to limited information disclosure, data corruption, or a Denial of Service DoS...

5.3CVSS5.8AI score0.00112EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 3 days ago5 views

CVE-2026-71312

A flaw was found in rclone, a command-line program for syncing files. This vulnerability allows a remote attacker to execute arbitrary commands on the server when processing SFTP paths. By crafting a malicious filename that uses specific Unicode single-quote characters, an attacker can bypass...

8CVSS6.2AI score0.00276EPSS
SaveExploits0References6
CVE
CVE
added 3 days ago24 views

CVE-2026-19005

CVE-2026-19005 affects nanacoai NanoClaw up to version 2.0.64. The vulnerability is in the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts within the Child-Agent Creation component, where a manipulation leads to improper privilege management. The advisory states ...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References6
Cvelist
Cvelist
added 3 days ago30 views

CVE-2026-19005 nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the...

6.5CVSS0.00209EPSS
SaveExploits0References6
EUVD
EUVD
added 3 days ago7 views

EUVD-2026-53717

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References6
OSV
OSV
added 3 days ago4 views

CVE-2026-19005 nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the...

5.3CVSS5.1AI score
SaveExploits0References8
EUVD
EUVD
added 3 days ago7 views

EUVD-2026-53714

The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'delay' Post Meta Setting in all versions up to, and including, 3.111.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.7AI score0.0025EPSS
SaveExploits0References13
NVD
NVD
added 3 days ago11 views

CVE-2026-18996

A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12. This vulnerability affects the function PermissionManager.checkShellCommand of the file src/capabilities/permissions.ts of the component runcommand Handler. Such manipulation leads to incorrect privilege assignment. Th...

6.5CVSS0.00245EPSS
SaveExploits0References9
NVD
NVD
added 3 days ago10 views

CVE-2026-18993

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/modeltools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The explo...

6.5CVSS0.00214EPSS
SaveExploits0References8
NVD
NVD
added 3 days ago11 views

CVE-2026-18995

A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParser.ts of the component MEDIA Path Handler. This manipulation causes information disclosure. The attack is possible to be carried out...

5.3CVSS0.00282EPSS
SaveExploits0References6
NVD
NVD
added 3 days ago11 views

CVE-2026-18992

A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function selecttools of the file agent/evolution/executor.py of the component Self-Evolution Review Agent. Performing a manipulation results in incorrect authorization. The attack is possible to be carri...

6.5CVSS0.00209EPSS
SaveExploits0References7
NVD
NVD
added 3 days ago15 views

CVE-2026-15991

The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to read and delete arbitrar...

8.8CVSS0.00606EPSS
SaveExploits0References9
Cvelist
Cvelist
added 3 days ago35 views

CVE-2026-19000 JeecgBoot Anonymous Chat Attachment send server-side request forgery

A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS0.00291EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 3 days ago10 views

CVE-2026-19000

A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS6.8AI score0.00291EPSS
SaveExploits0References7
Rows per page
Query Builder