EUVD-2026-25315

OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GITTEMPLATEDIR and AWSCONFIGFILE are not blocked in the host-env blocklist. Attackers can exploit approved exec requests to redirect git or AWS CLI behavior through attacker-controlled configuration files ...

aws-secretsmanager-cache (=0.5.0), dynamo-es (=0.4.5) +1 more potentially affected by unknown CVE via aws-sdk-config (>=0.17.0 <=0.26.0)

aws-sdk-config CARGO version =0.17.0, =0.1.0, =0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

CVE-2021-32717

Shopware is an open source eCommerce platform. In versions prior to 6.4.1.1 private files publicly accessible with Cloud Storage providers when the hashed URL is known. Users are recommend to first change their configuration to set the correct visibility according to the documentation. The...

Introducing Spring AI Amazon Bedrock Nova Integration via Converse API

The Amazon Bedrock Nova models represent a new generation of foundation models supporting a broad range of use cases, from text and image understanding to video-to-text analysis. With the Spring AI Bedrock Converse API integration, developers can seamlessly connect to these advanced Nova models a...

Citrix DAAS Console

Introduction This article is a summary of the top support articles related to Citrix Daas web consoles: Web Studio and Monitor. Top Knowledge Content Director CTX257614 - How to create a detailed custom report from the Cloud Hosted Director Monitor Web Studio CTX477615 - Studio Console Shows...

Citrix Cloud CVAD - AWS Configuration Checklist and Suggestions Guide

Getting any MCS Provisioning Exceptions, make sure to get the entire details of the Exceptions to help work the case\issue...

JasperReports - Authenticated File Read Vulnerability

Exploit for multiple platform in category web applications TIBCO’s JasperReports string = wrapper.getParameterValues"page" To: getResource @ DirResourceSet.java:101 file = new File/home/rhino/jasperreports...mcat/webapps/jasperserver,"/WEB-INF/jsp/modules/administer/adminImport.jsp" Due to a lack...

JasperReports - (Authenticated) File Read

TIBCO’s JasperReports string = wrapper.getParameterValues"page" To: getResource @ DirResourceSet.java:101 file = new File/home/rhino/jasperreports...mcat/webapps/jasperserver,"/WEB-INF/jsp/modules/administer/adminImport.jsp" Due to a lack of input validation we found ourselves with the capability...