CVE-2026-100599 OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome

OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audio command arrays and executes them on a paired node without going through the normal system.run approval flow. In...

EUVD-2026-87466

OpenClaw npm package openclaw before 2026.7.1 fails to enforce the owner-only authorization requirement for Claude Code permission prompts delivered through the MCP channel bridge. An authorized non-owner channel sender with channel command access can approve or deny a pending permission request...

EUVD-2026-87467

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

CVE-2026-100584 OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

CVE-2026-100580 OpenClaw before 2026.7.1 Remote Code Execution via cron tool

OpenClaw npm package 'openclaw' before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a...

CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

EUVD-2026-87481

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

cve-2023-33476

CVE-2023-33476 ReadyMedia MiniDLNA バージョン 1.1.15 から 1.3.2 はバッファオーバーフローの脆弱性の影響を受けます。この脆弱性は、チャンク転送エンコーディングを使用する HTTP リクエストを処理する際の不正確な検証ロジックによって引き起こされます。その結果、後続のコードが、割り当てられたバッファの長さを超える攻撃者制御のチャンク値を使用し、領域外読み取り/書き込みが発生します。 根本原因分析 エクスプロイト詳細 NIST CVE エントリ エクスプロイト x86-64 ターゲット向け tcache poisoning + GOT...

CVE-2025-49113

📧 Roundcube ≤ 1.6.10 認証後RCE - PHPオブジェクトデシリアライゼーション CVE-2025-49113 🔍 解説 Roundcube（バージョン ≤ 1.6.10）において、安全でないPHPオブジェクトのデシリアライゼーションに起因する、認証後の重大なリモートコード実行脆弱性が発見されました。この深刻な欠陥は、コードベース内に10年以上 も静かに存在し続けていました。 完全な技術的解説と悪用の詳細については、以下を参照してください： 👉 https://fearsoff.org/research/roundcube 🐳 クイックインストール（Docker経由）...

hardcodes

hardcodes 소스 코드에서 문자열 추출 hardcodes 는 개발자가 프로그램에 하드코딩한 문자열을 검색하는 유틸리티입니다. 모듈식 토크나이저를 사용하여 주석, 모든 수의 백슬래시 및 거의 모든 구문을 처리할 수 있습니다. 네, 모든 구문을 처리하도록 설계되었으며 다음 언어가 공식적으로 지원됩니다: root@kitploit: ada, applescript, c, c, c++, coldfusion, golang, haskell, html, java, javascript, jsp, lua, pascal, perl, php,...

hardcodes

hardcodes extract strings from source code hardcodes is a utility for searching strings hardcoded by developers in programs. It uses a modular tokenizer that can handle comments, any number of backslashes & nearly any syntax you throw at it. Yes, it is designed to process any syntax and following...

CVE-2020-7961-payloads

CVE-2020-7961-ペイロード Liferay Portal 7.2.1 CE GA2 より前のバージョンにおける信頼されないデータのデシリアライゼーションにより、リモート攻撃者が JSON Web サービス JSONWS を介して任意のコードを実行できる可能性があります。 Step 1 ペイロードを LifExp.java に記述します。 Step 2 javac でコンパイルします。 Step 3 ログサーバーを立てます 「Burp Collaborator Client」を使用するとよいかもしれません。 Step 4 poc.py を実行します。 ....お楽しみください ...

Apache Tapestry - Remote Code Execution

Apache Tapestry contains a critical unauthenticated remote code execution vulnerability. Affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. Note that this vulnerability is a bypass of the fix for CVE-2019-0195. Before that fix it was possible to download arbitrary class files from the...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

Apache OFBiz Directory Traversal - Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...

Primetek Primefaces 5.x - Remote Code Execution

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution. id: CVE-2017-1000486 info: name: Primetek Primefaces 5.x - Remote Code Execution author: Moritz Nentwig severity: critical description: Primetek Primefaces 5.x is vulnerable to a weak encryption fl...

Intelbras WIN 300/WRN 342 - Credentials Disclosure

Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code. id: CVE-2021-3017 info: name: Intelbras WIN 300/WRN 342 - Credentials Disclosure author: pikpikcu severity: high description:...

Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting

Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function. id: CVE-2023-34192 info: name: Zimbra Collaboration Suite ZCS v.8.8.15 - Cross-Site Scripting author: ritikchaddha...

NUUO NVR camera `debugging_center_utils_.php` - Command Execution

debuggingcenterutils.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter. id: CVE-2016-5674 info: name: NUUO NVR camera debuggingcenterutils.p...

SolarWinds Web Help Desk < 2026.1 - Unauthenticated JNDI Injection RCE

SolarWinds Web Help Desk before version 2026.1 contains an insecure deserialization vulnerability in the jabsorb JSON-RPC library. When chained with a CSRF whitelist bypass CVE-2025-40536, remote unauthenticated attackers can exploit JNDI injection via the Apache Xalan JNDIConnectionPool class to...