CVE-2026-100552 OpenClaw before 2026.8.1 Policy Bypass via Native Tools

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

EUVD-2026-87498

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

CVE-2026-100552: Incorrect Authorization

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

CVE-2026-100690: Improper Link Resolution Before File Access

Hugo versions from v0.161.0 through v0.165.0 run Node.js tools css.PostCSS, css.TailwindCSS, js.Babel under the Node.js permission model to restrict file system reads to the project directory and configured mounts. Because the Node.js permission model validates only the lexical path and follows...

Search_CVE

Este repositorio no tiene un README...

Nagios-XI-s-CVE-2023-40931-Exploit

이 저장소에는 README가 없습니다...

[SECURITY] Fedora 45 Update: uboot-tools-2026.10-0.4.rc4.fc45

This package contains a few U-Boot utilities - mkimage for creating boot imag es and fwprintenv/fwsetenv for manipulating the boot environment variables...

SUSE SLES15: Multi-Linux-Manager-Server-SLE-release / mgradm / etc (SUSE-SU-2025:3839-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:3839-1 advisory. Multi-Linux-Manager-Server-SLE-release: - Update for the release packages for fixing the EOL - Fixed migration issue bsc1243486 server-attestation-imag...

CVE-2021-42574

rustc version 1.56.1: corregido y error de compilación rustc version 1.56: compilación exitosa...

CVE-2023-41080

脆弱: http://localhost:8081//secret.html;@example.com 任意のWebサイトにリダイレクトされます（この場合は、https://example.com）。 修正済み: http://localhost:8082//secret.html;@example.com 参照: https://github.com/advisories/GHSA-q3mw-pvr8-9ggc...

CVE-2026-77321 TREK MCP trip summary bypasses delegated OAuth read scopes

TREK is a collaborative travel planner. Prior to 3.3.0, the gettripsummary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring trips:read and returns core trip summary data regardless of the delegated scopes. A token granted only an unrelated...

CVE-2026-77321 TREK MCP trip summary bypasses delegated OAuth read scopes

TREK is a collaborative travel planner. Prior to 3.3.0, the gettripsummary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring trips:read and returns core trip summary data regardless of the delegated scopes. A token granted only an unrelated...

EUVD-2026-86339

TREK is a collaborative travel planner. Prior to 3.3.0, the gettripsummary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring trips:read and returns core trip summary data regardless of the delegated scopes. A token granted only an unrelated...

CVE-2025-29927

This repository does not have a README...

Malicious Package

Overview helpersutils-dev-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Linux Distros Unpatched Vulnerability : CVE-2026-59991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from...

PT-2026-98226

Name of the Vulnerable Software and Affected Versions TREK versions prior to 3.3.0 Description The get trip summary function in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring the trips:read scope. This allows a token granted only unrelated capabilities,...

Fedora 45 : bcm283x-firmware / uboot-tools (2026-313e66c007)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-313e66c007 advisory. Update to the latest U-Boot 2026.10 RC4 fixes Display fixes from sleep for some generations of Raspberry Pi Tenable has extracted the preceding description...

CVE-2026-61742: Missing Authentication for Critical Function

DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Versions prior to 0.22.5 expose an unauthenticated HTTP MCP endpoint when started with the documented HTTP transport mode, for example --transport http --port 8080. The HTTP server attempts to protect...

CVE-2026-86512

A flaw was found in java-json-tools json-patch. This vulnerability, located in the CopyOperation.apply and MoveOperation.apply functions, allows for improper access controls. A remote attacker could exploit this to potentially perform unauthorized operations, leading to impacts on confidentiality...