sec_review_cve-2024-3094

Une revue de sécurité complète de la vulnérabilité open source CVE-2024-3094 a été réalisée. Sur la base des données obtenues, ont été préparés : 1. Le rapport «ThreatModel + SecurityReview» – description détaillée des menaces, voies d'exploitation, évaluation des risques et recommandations pour...

OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation

Impact Browser SSRF Policy Bypass via Interaction-Triggered Navigation. Browser interactions could trigger navigations that bypassed the normal SSRF navigation checks. OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a...

SUSE CVE-2025-29785

quic-go is an implementation of the QUIC protocol in Go. The loss recovery logic for path probe packets that was added in the v0.50.0 release can be used to trigger a nil-pointer dereference by a malicious QUIC client. In order to do so, the attacker first sends valid QUIC packets from different...