OpenClaw Command Execution Vulnerability (CNVD-2026-16054)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a command execution vulnerability that can be exploited by an attacker to bypass expected execution limits...

EUVD-2016-5216

Malware in sbrugna...

EUVD-2022-33601

Malicious code in bioql PyPI...

CVE-2025-48950 MaxKB Python Sandbox Bypass in Function Library

MaxKB is an open-source AI assistant for enterprise. Prior to version 1.10.8-lts, Sandbox only restricts the execution permissions of binary files in common directories, such as /bin,/usr/bin, etc. Therefore, attackers can exploit some files with execution permissions in non blacklisted directori...

CVE-2023-0221

Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program...

CVE-2025-31353

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateOpcSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from a...

ASB-A-258653813

In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

The vulnerability of the PI Server database management system allows a hacker to circumvent restrictions on executing SQL commands.

The vulnerability of the PI Server database management system is related to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to bypass restrictions on the execution of SQL commands by adding the account to the Trusted Users group and excludin...