Lucene search
+L

50 matches found

Kitploit
Kitploit
•added 2026/10/14 12:35 a.m.•22 views

columba

Columba Columba is a simple messaging and voice app for the Reticulum network on Android. Send LXMF messages and make LXST voice calls without relying on the internet, cell towers, or any central servers. Built with a native Android interface and Material Design 3, Columba brings mesh networking ...

5.9AI score
SaveExploits0References10
NVD
NVD
•added 2026/09/26 3:17 a.m.•15 views

CVE-2026-100544

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller...

8.8CVSS0.00246EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/26 2:18 a.m.•14 views

CVE-2026-100544 openclaw voice-call before 2026.8.1 Authorization Bypass

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller...

8.8CVSS6AI score0.00246EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/26 2:18 a.m.•14 views

EUVD-2026-87506

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller...

8.8CVSS6AI score0.00246EPSS
SaveExploits0References2
Mend
Mend
•added 2026/09/26 2:18 a.m.•7 views

CVE-2026-100544

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller...

8.8CVSS6AI score0.00246EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/26 12:00 a.m.•10 views

PT-2026-99181

Name of the Vulnerable Software and Affected Versions @openclaw/voice-call versions prior to 2026.8.1 Description The package launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. This causes owner-only tool filtering to fail...

8.8CVSS6AI score0.00246EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/03 8:38 a.m.•19 views

columba v2.2.4-beta

Columba Columba is a simple messaging and voice app for the Reticulum network on Android. Send LXMF messages and make LXST voice calls without relying on the internet, cell towers, or any central servers. Built with a native Android interface and Material Design 3, Columba brings mesh networking ...

5.8AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/08/18 4:50 a.m.•16 views

columba v2.2.2-beta

Columba Columba is a simple messaging and voice app for the Reticulum network on Android. Send LXMF messages and make LXST voice calls without relying on the internet, cell towers, or any central servers. Built with a native Android interface and Material Design 3, Columba brings mesh networking ...

5.7AI score
SaveExploits0References11
Kitploit
Kitploit
•added 2026/08/06 3:03 a.m.•16 views

columba v2.1.0-beta

Columba Columba is a simple messaging and voice app for the Reticulum network on Android. Send LXMF messages and make LXST voice calls without relying on the internet, cell towers, or any central servers. Built with a native Android interface and Material Design 3, Columba brings mesh networking ...

5.7AI score
SaveExploits0References11
Kitploit
Kitploit
•added 2026/07/21 7:40 a.m.•14 views

columba v2.0.9

Columba Columba is a simple messaging and voice app for the Reticulum network on Android. Send LXMF messages and make LXST voice calls without relying on the internet, cell towers, or any central servers. Built with a native Android interface and Material Design 3, Columba brings mesh networking ...

5.7AI score
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2026/05/05 11:24 a.m.•10 views

CVE-2026-42437 OpenClaw 2026.4.9 < 2026.4.10 - Denial of Service via Oversized WebSocket Frames in Voice-call Realtime Path

OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without proper validation. Remote attackers can send oversized WebSocket frames to cause service unavailability for deployments exposing th...

8.2CVSS5.7AI score0.0075EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•30 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw from 2026.4.9 to 2026.4.10 contained a security vulnerability. This vulnerability stemmed from a denial-of-service attack in the real-time WebSocket path for voice calls. It was possible for a...

8.2CVSS5.9AI score0.0075EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/28 6:09 p.m.•13 views

CVE-2026-41395 OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3

OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that canonicalizes query ordering for signatures but hashes raw URLs for replay detection. Attackers can reorder query parameters to bypass replay cache detection and trigger duplicate voice-call...

8.2CVSS5.8AI score0.00253EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/28 6:09 p.m.•25 views

EUVD-2026-26103

OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that canonicalizes query ordering for signatures but hashes raw URLs for replay detection. Attackers can reorder query parameters to bypass replay cache detection and trigger duplicate voice-call...

8.2CVSS5.8AI score0.00253EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/28 6:09 p.m.•51 views

CVE-2026-41395

OpenClaw prior to 2026.3.28 is affected by a webhook replay vulnerability in Plivo V3 signature verification. The system canonicalizes query ordering for signatures but hashes the raw verification URL for replay detection, allowing an attacker who captures a valid signed webhook to reorder query ...

8.2CVSS5.8AI score0.00253EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/04/28 6:09 p.m.•20 views

CVE-2026-41395 OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3

OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that canonicalizes query ordering for signatures but hashes raw URLs for replay detection. Attackers can reorder query parameters to bypass replay cache detection and trigger duplicate voice-call...

8.2CVSS6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/01/29 6:06 p.m.•20 views

EUVD-2025-206533

Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all voice lines and causing a denial of service on incoming calls...

6.3CVSS5.9AI score0.00287EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
•added 2025/10/17 11:03 a.m.•21 views

A Surprising Amount of Satellite Traffic Is Unencrypted

Here's the summary: We pointed a commercial-off-the-shelf satellite dish at the sky and carried out the most comprehensive public study to date of geostationary satellite communication. A shockingly large amount of sensitive traffic is being broadcast unencrypted, including critical infrastructur...

6.8AI score
SaveExploits0
Malwarebytes
Malwarebytes
•added 2025/10/15 12:20 p.m.•21 views

Satellites leak voice calls, text messages and more

Scientists from several US universities intercepted unencrypted broadcast through geostationary satellites using only off-the-shelf equipment on a university rooftop. Geostationary satellites move at the same speed as the Earth’s rotation so it seems as though they are always above the same exact...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 3:04 a.m.•16 views

CVE-2023-22385

Memory Corruption in Data Modem while making a MO call or MT VOLTE call...

9.8CVSS7AI score0.00422EPSS
SaveExploits0References1
Rows per page
Query Builder