CVE-2022-20818

CVE-2022-20818：通过 Cisco SD-WAN 中的部分文件读取实现本地权限提升 Viptela SSH shell 的 "config - load" 功能使用 "wget" 通过 FTP 获取远程 "command" 文件。通过托管恶意 FTP 服务器并将 wget 创建的本地文件替换为符号链接，攻击者可以利用运行命令的 "root" 权限读取任意文件的第一行。 通过读取 "/etc/confd/confdetcsecret" 中的机密信息，攻击者能够在机器上获得具有 "root" 权限的交互式 shell。 厂商披露： 该漏洞的厂商披露和修复可参见此处。 要求：...

CVE-2026-31994

OpenClaw versions prior to 2026.2.19 contain a local command injection vulnerability in Windows scheduled task script generation due to unsafe handling of cmd metacharacters and expansion-sensitive characters in gateway.cmd files. Local attackers with control over service script generation...

GHSA-5GQG-MQH5-2V39 Duplicate Advisory: OpenClaw Windows Scheduled Task script generation allowed local command injection via unsafe cmd argument handling

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mqr9-vqhq-3jxw. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.2.19 contain a local command injection vulnerability in Windows scheduled task script...

CVE-2026-31999

OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers to influence execution behavior through cwd manipulation. Remote attackers can exploit improper shell execution...

Sleep with one eye open: how Librarian Ghouls steal data by night

Introduction Librarian Ghouls, also known as "Rare Werewolf" and "Rezet", is an APT group that targets entities in Russia and the CIS. Other security vendors are also monitoring this APT and releasing analyses of its campaigns. The group has remained active through May 2025, consistently targetin...

Looking Over the Nation-State Actors’ Shoulders

Looking over the nation-state actors’ shoulders: Even they have a difficult day sometimes By Trellix and Marc Elias · Febraury 17, 2022 Have you ever been curious about how nation-state actors operate and what their day-to-day work looks like? This blog reveals some of these details observed base...

CVE-2020-6332

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

How to read the registry RUN key, there are several key value! - Vulnerability warning-the black bar safety net

A batch: to save for. bat or. cmd files 1, The use of the reg query: @echo off set r=\Software\Microsoft\Windows\CurrentVersion\Run for /f "skip=3 delims=" %%a in ’reg query HKLM \ %r%’ do echo.%% a echo.& amp;echo.& amp;echo. for /f "skip=3 delims=" %%a in ’reg query HKCU \ %r%’ do echo.%% a pau...