Lucene search
+L

25 matches found

Positive Technologies
Positive Technologies
•added 2026/06/11 12:00 a.m.•40 views

PT-2026-48743

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.25 Description A path traversal issue exists in the memory-core artifact loading process, where the workspace state affects how the local package root is resolved. This allows attackers with access to affected...

7.8CVSS5.5AI score0.00167EPSS
SaveExploits0References7
NVD
NVD
•added 2026/04/30 10:16 p.m.•13 views

CVE-2026-7551

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded...

8.8CVSS0.01021EPSS
SaveExploits1References3
OSV
OSV
•added 2026/04/30 9:29 p.m.•21 views

CVE-2026-7551 HKUDS OpenHarness Remote Command Execution via /bridge Slash Command

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded...

8.7CVSS6.8AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/04/30 9:29 p.m.•26 views

EUVD-2026-26451

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded...

8.8CVSS6.7AI score0.01021EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/04/30 9:29 p.m.•48 views

CVE-2026-7551 HKUDS OpenHarness Remote Command Execution via /bridge Slash Command

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded...

8.8CVSS0.01021EPSS
SaveExploits1References3
Rows per page
Query Builder