Lucene search
+L

45907 matches found

CNNVD
CNNVD
added 2026/03/06 12:0 a.m.9 views

Chamilo 代码问题漏洞

Chamilo is an open-source learning management system developed by Chamilo. Versions of Chamilo prior to 1.11.34 contained code vulnerabilities. These vulnerabilities stemmed from improper validation of uploaded files, which could allow low-privilege users who are authenticated to upload specially...

8.8CVSS6.1AI score0.00729EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2026/03/05 10:30 p.m.18 views

USN-8079-1: less vulnerability

It was discovered that less incorrectly handled certain file names. An attacker could possibly use this issue to cause a denial of service or execute arbitrary commands...

7.8CVSS6AI score0.01059EPSS
SaveExploits0
OSV
OSV
added 2026/03/05 10:30 p.m.9 views

USN-8079-1 less vulnerability

It was discovered that less incorrectly handled certain file names. An attacker could possibly use this issue to cause a denial of service or execute arbitrary commands...

7.8CVSS6.8AI score0.01059EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2026/03/05 10:17 p.m.14 views

USN-8078-1: Zutty vulnerability

Carter Sande discovered that Zutty did not correctly echo invalid input to the console on DECRQSS. An attacker could possibly use this issue to execute arbitrary commands...

9.8CVSS6AI score0.01804EPSS
SaveExploits1
NVD
NVD
added 2026/03/05 10:16 p.m.12 views

CVE-2026-29610

OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintended binaries by manipulating PATH environment variables through node-host execution or project-local bootstrapping. Attackers with authenticated access to node-host execution...

8.8CVSS0.00465EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/05 10:16 p.m.8 views

CVE-2026-28470

OpenClaw versions prior to 2026.2.2 contain an exec approvals must be enabled allowlist bypass vulnerability that allows attackers to execute arbitrary commands by injecting command substitution syntax. Attackers can bypass the allowlist protection by embedding unescaped $ or backticks inside...

9.8CVSS0.00476EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/05 10:0 p.m.36 views

CVE-2026-29610

OpenClaw CVE-2026-29610 affects versions prior to 2026.2.14. It describes a command hijacking flaw where PATH manipulation during node-host execution or project-local bootstrapping allows placing malicious executables to override allowlisted safe-bin commands, leading to arbitrary command executi...

8.8CVSS6.3AI score0.00465EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/03/05 10:0 p.m.11 views

EUVD-2026-9934

OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintended binaries by manipulating PATH environment variables through node-host execution or project-local bootstrapping. Attackers with authenticated access to node-host execution...

7.8CVSS6.3AI score0.00465EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/05 10:0 p.m.9 views

CVE-2026-29610 OpenClaw < 2026.2.14 - Command Hijacking via Unsafe PATH Handling

OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintended binaries by manipulating PATH environment variables through node-host execution or project-local bootstrapping. Attackers with authenticated access to node-host execution...

7.7CVSS7.5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/03/05 9:59 p.m.10 views

EUVD-2026-9916

OpenClaw versions prior to 2026.2.2 contain an exec approvals must be enabled allowlist bypass vulnerability that allows attackers to execute arbitrary commands by injecting command substitution syntax. Attackers can bypass the allowlist protection by embedding unescaped $ or backticks inside...

9.8CVSS6.2AI score0.00476EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/05 9:59 p.m.4 views

CVE-2026-28470

OpenClaw versions prior to 2026.2.2 contain an exec approvals must be enabled allowlist bypass vulnerability that allows attackers to execute arbitrary commands by injecting command substitution syntax. Attackers can bypass the allowlist protection by embedding unescaped $ or backticks inside...

9.8CVSS6.2AI score0.00476EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/03/05 1:39 p.m.15 views

CVE-2026-27441

SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution...

9.8CVSS5.9AI score0.0031EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/05 9:50 a.m.6 views

MAL-2026-1243 Malicious code in nf-referral-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb611867bc3ba4676e51a8f14605087e805e92819becb23a5be2629a5418317 The package nf-referral-backend was found to contain malicious code. Source: ghsa-malware...

5.8AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/05 2:40 a.m.231 views

Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager

CVE-2026‑20127 – Remote Authentication Bypass for Cisco Cataly...

10CVSS6.5AI score0.88243EPSS
SaveExploits10
RedhatCVE
RedhatCVE
added 2026/03/05 1:57 a.m.10 views

CVE-2025-13686

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the job subroutine component...

8.8CVSS6.2AI score0.00344EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/05 1:57 a.m.7 views

CVE-2025-13687

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the user-defined function component...

8.8CVSS6.2AI score0.00344EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.56 views

OpenClaw 代码问题漏洞

OpenClaw is an open-source intelligent artificial assistant. Versions of OpenClaw prior to 2026.2.14 had code vulnerabilities related to command hijacking. Attackers could execute unintended binary files by manipulating the PATH environment variable, potentially leading to arbitrary command...

8.8CVSS6.1AI score0.00465EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2026/03/05 12:0 a.m.173 views

📄 Juniper JunosEvolved Remote Command Execution

This Metasploit module exploits an unauthenticated command injection vulnerability in the Juniper JunosEvolved API. The exploit workflow involves creating a custom command entity, mapping it to a Directed Acyclic Graph DAG, and triggering an execution instance. The module uses a non-destructive...

9.8CVSS6.1AI score0.17709EPSS
SaveExploits2
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.19 views

OpenClaw 参数注入漏洞

OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw suffers from a parameter injection vulnerability that can be exploited by an attacker to execute arbitrary commands by injecting command substitution syntax...

9.8CVSS6.1AI score0.00476EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:0 a.m.8 views

Unity Linux 20.1060e / 20.1070e Security Update: atril (UTSA-2026-005397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005397 advisory. Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in...

8.5CVSS5.9AI score0.01016EPSS
SaveExploits3References4
Rows per page
Query Builder