CVE-2025-55182POC

CVE-2025-55182 React Server Components RCE POC Dieses Projekt ist ein CVE-2025-55182 - React Server Components RSC RCE Proof of Concept und demonstriert, wie unter bestimmten Bedingungen durch vm.runInThisContext und bösartige ACTION-Payloads eine Remotecodeausführung ausgelöst werden kann...

CVE-2026-53827 OpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding

OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action forwarding that allows model-controlled metadata to forward action payloads with Gateway credentials to attacker-supplied loopback URLs. Remote attackers can intercept Gateway tokens and action payloads by...

PT-2026-49031

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.2 Description An issue in message.action forwarding allows model-controlled metadata to forward action payloads containing Gateway credentials to attacker-supplied loopback URLs. Remote attackers can intercept...