GHSA-WPC6-37G7-8Q4W OpenClaw: Shell init-file options could satisfy exec allowlist script matching

Summary Before OpenClaw 2026.3.31, exec allowlist matching could treat shell init-file wrapper invocations as if the approved script itself were being executed. Shell options such as --rcfile, --init-file, and --startup-file could therefore inherit allowlist trust from a matched script path even...

CVE-2025-31890

creationtimestamp| type| source ---|---|--- 2025-04-01 18:03:33+00:00| seen| https://t.me/cvedetector/21755...

CVE-2025-30876

creationtimestamp| type| source ---|---|--- 2025-04-01 06:40:24+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llqbbv3bgy2s 2025-04-01 07:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114261603808938321 2025-04-01 07:48:31+00:00| seen|...

CVE-2025-31689

creationtimestamp| type| source ---|---|--- 2025-04-01 01:54:45+00:00| seen| https://t.me/cvedetector/21673...

CVE-2025-26963

creationtimestamp| type| source ---|---|--- 2025-02-25 14:24:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5285 2025-02-25 17:23:02+00:00| seen| https://t.me/cvedetector/18884 2026-04-01 21:28:26+00:00| seen| Telegram/EgY-3dooiREg-dALgS8idmo8jFkn1Hp5AACRbJP7ZYbsQN4...

dogs-inn.de Cross Site Scripting vulnerability OBB-3892037

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nyn.es Cross Site Scripting vulnerability OBB-3891697

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

scalp.cz Cross Site Scripting vulnerability OBB-3891668

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vinoteka.dios.cz Cross Site Scripting vulnerability OBB-3891416

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

poplist.de Cross Site Scripting vulnerability OBB-3891312

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Responsive Theme <= 5.0.2 is vulnerable to Broken Access Control

Software Responsive Type Theme Vulnerable versions = 5.0.2 Fixed in 5.0.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2848 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4e54d82df723 Credits Krzysztof Zając - CERT PL...

farmaciacontinua.it Cross Site Scripting vulnerability OBB-3891184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

erlangen-neustadt-evangelisch.de Cross Site Scripting vulnerability OBB-3244156

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tours.virtualviewsphotography.com Cross Site Scripting vulnerability OBB-2458395

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tours.studio44a.com Cross Site Scripting vulnerability OBB-2458391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

majontomatom.com Cross Site Scripting vulnerability OBB-2458273

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mparts24.de Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8635 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting mparts24.de website and its users. Following coordinated a...

The HITRUST CSF 90-Day Rules – What You Need to Know

Earlier this year, HITRUST announced required changes, effective April 1, 2019 applicable to all CSF assessor firms, regarding quality and consistency for validated assessments. The changes were outlined in the CSF Assurance Bulletin and included the release of the HITRUST CSF® Assessor Quality...

fi.iherb.com XSS vulnerability

Open Bug Bounty ID: OBB-574920 Description| Value ---|--- Affected Website:| fi.iherb.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

Threat Outbreak Alert RuleID22030: Email Messages Distributing Malicious Software on April 1, 2016

Medium Alert ID: 44404 First Published: 2016 April 1 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22030 may contain the following files: Name | Siz...