11244 matches found
The vulnerability in the extensions/lobster/src/lobster-tool.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary commands.
The vulnerability in the extensions/lobster/src/lobster-tool.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...
The vulnerability of the setVpnPassCfg() function in the cstecgi.cgi script of the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.
The vulnerability of the setVpnPassCfg function in the cstecgi.cgi script of the TOTOLINK A7100RU router’s software is related to the failure to eliminate special elements during the processing of the pptpPassThru parameter. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) relates to synchronization errors when using a shared resource, allowing a hacker to execute arbitrary commands.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a hacker to execute arbitrary commands...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) in Windows operating systems arises from the failure to take measures to neutralize special elements. This vulnerability allows a perpetrator to execute arbitrary commands.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot in Windows operating systems is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a hacker to execute arbitrary commands...
The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary commands.
The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...
TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32922)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setDiagnosisCfg function in the /cgi-bin/cstecgi.cgi file, which fails to proper...
The vulnerability in the src/daemon/schtasks.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary commands.
The vulnerability in the src/daemon/schtasks.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...
The vulnerability in the src/daemon/schtasks.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary commands.
The vulnerability in the src/daemon/schtasks.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...
GHSA-VC46-VW85-3WVM PraisonAI has critical RCE via `type: job` workflow YAML
praisonai workflow run loads untrusted YAML and if type: job executes steps through JobWorkflowExecutor in jobworkflow.py. This supports: - run: → shell command execution via subprocess.run - script: → inline Python execution via exec - python: → arbitrary Python script execution A malicious YAML...
The vulnerability of the ESAFENET DSM software for monitoring and managing network security, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of the ESAFENET DSM monitoring and network security management software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow attackers to execute arbitrary commands...
The vulnerability in the web interface of the operating system PAN-OS allows a hacker to bypass security restrictions and execute arbitrary commands.
The vulnerability of the PAN-OS operating system’s web management interface is related to the lack of measures taken to neutralize the script in the web page attributes. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands...
TRENDnet TEW-713RE Command Injection Vulnerability
The TRENDnet TEW-713RE is a wireless network range extender from TRENDnet. The TRENDnet TEW-713RE suffers from a command injection vulnerability that originates from a misuse of the parameter dest in the file /goform/addRouting, which can be exploited by an attacker to cause arbitrary command...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32927)
The TOTOLINK A7100RU is a wireless router produced by China Jiying Electronics Corporation. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setMiniuiHomeInfoShow function within the /cgi-bin/cstecgi.cgi file. This function...
CVE-2026-32892: Improper Neutralization of Special Elements used in an OS Command
Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS contains an OS Command Injection vulnerability in the file move function. The move function in fileManage.lib.php passes user-controlled path values directly into exec shell commands without using...
Incomplete List of Disallowed Inputs
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the handling of environment variables in the exec env denylist. An attacker can execute arbitrary commands by injecting malicious values into...
CVE-2024-1490 Wago: Vulnerability in WBM through Open VPN
An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on t...
The vulnerability of the nvm_download() function in the Node.js Node Version Manager (nvm) allows a hacker to execute arbitrary commands.
The vulnerability of the nvmdownload function in the Node.js Node Version Manager nvm lies in the improper elimination of special elements during the processing of the NVMAUTHHEADER variable. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
WAGO PLC 代码注入漏洞
WAGO PLC is a programmable logic controller developed by the German company WAGO. WAGO PLC has a code injection vulnerability, which stems from improper OpenVPN configuration. This vulnerability may lead to the execution of arbitrary commands...
TOTOLINK A3300R 安全漏洞
TOTOLINK A3300R is a wireless router produced by TOTOLINK Corporation. The TOTOLINK A3300R v17.0.0cu.557B20221024 version contains a security vulnerability. This vulnerability stems from insufficient validation of stun-pass parameter inputs, which may allow attackers to execute arbitrary commands...