Lucene search
+L

22193 matches found

Wiz blog
Wiz blog
•added 2026/04/29 12:00 p.m.•20 views

Modern Defensible Architecture: Resilience for the Australian Federal Government

How Wiz enables Australian government agencies to operationalise MDA with real-time context, zero trust enforcement, and end-to-end cloud visibility...

5.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/29 12:00 a.m.•13 views

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the errorcontext function in the arch/x86/kernel/cpu/mce/severity.c module, part of the Linux kernel support for x86 processors, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to trigger a service failure...

5.5CVSS6.7AI score0.00246EPSS
SaveExploits0References18Affected Software2
Tenable Nessus
Tenable Nessus
•added 2026/04/29 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-40356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gssacceptseccontext on a system...

7.5CVSS7AI score0.00604EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/04/29 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-31652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/stat: deallocate damoncall failure leaking damonctx damonstatstart always allocates the module's damonctx object damonstatcontext. Meanwhile, if...

7.8CVSS6.9AI score0.00115EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/28 10:16 p.m.•26 views

CVE-2026-7319

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

7.5CVSS0.0053EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/28 9:00 p.m.•58 views

CVE-2026-7319 elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

7.5CVSS0.0053EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/28 9:00 p.m.•35 views

CVE-2026-7319

CVE-2026-7319 affects elinsky execution-system-mcp 0.1.0. The vulnerability is in the function _get_context_file_path (src/execution_system_mcp/server.py, add_action Tool), where improper handling of the context argument enables path traversal. Attack can be initiated remotely; the exploit has be...

7.5CVSS6.8AI score0.0053EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/28 9:00 p.m.•35 views

EUVD-2026-26156

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

7.5CVSS6.8AI score0.0053EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/28 9:00 p.m.•14 views

CVE-2026-7319 elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

7.5CVSS6.8AI score0.0053EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/28 7:37 p.m.•24 views

CVE-2026-41406

OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages. Attackers can exploit fetched quoted, root, and thread context messages to bypass sender allowlist restrictions and retrieve unauthorized content...

5.4CVSS0.00222EPSS
SaveExploits0References3
osv_mini
osv_mini
•added 2026/04/28 6:24 p.m.•12 views

MINI-HF94-3PXV-P44M

Bulletin has no description...

6.1CVSS6.1AI score0.00313EPSS
SaveExploits1
EUVD
EUVD
•added 2026/04/28 6:10 p.m.•23 views

EUVD-2026-26113

OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages. Attackers can exploit fetched quoted, root, and thread context messages to bypass sender allowlist restrictions and retrieve unauthorized content...

5.4CVSS6AI score0.00222EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/28 6:10 p.m.•15 views

CVE-2026-41406

OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages. Attackers can exploit fetched quoted, root, and thread context messages to bypass sender allowlist restrictions and retrieve unauthorized content...

5.4CVSS6AI score0.00222EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/28 6:09 p.m.•11 views

CVE-2026-41376 OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validation

OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders. Attackers can fetch thread-root and reply context messages that should be filtered by sender allowlists, bypassing access controls...

5.4CVSS5.9AI score0.00157EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/28 6:09 p.m.•36 views

EUVD-2026-26085

OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders. Attackers can fetch thread-root and reply context messages that should be filtered by sender allowlists, bypassing access controls...

5.4CVSS5.9AI score0.00157EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/04/28 6:09 p.m.•24 views

CVE-2026-41376 OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validation

OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders. Attackers can fetch thread-root and reply context messages that should be filtered by sender allowlists, bypassing access controls...

2.3CVSS5.8AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/28 6:09 p.m.•17 views

CVE-2026-41376

OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders. Attackers can fetch thread-root and reply context messages that should be filtered by sender allowlists, bypassing access controls...

5.4CVSS5.9AI score0.00157EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/28 6:09 p.m.•65 views

CVE-2026-41376 OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validation

OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders. Attackers can fetch thread-root and reply context messages that should be filtered by sender allowlists, bypassing access controls...

5.4CVSS0.00157EPSS
SaveExploits0References3
osv_mini
osv_mini
•added 2026/04/28 3:45 p.m.•11 views

MINI-VM6Q-WHRJ-P9XC

Bulletin has no description...

9.2CVSS6.3AI score0.00538EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/04/28 1:45 p.m.•17 views

MINI-C9P3-27R3-HGWC

Bulletin has no description...

7.3CVSS6.5AI score0.02054EPSS
SaveExploits0
Rows per page
Query Builder