10 matches found
Incomplete List of Disallowed Inputs
Overview pyspector is an A high-performance, security-focused static analysis tool for Python, powered by Rust. Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the PluginSecurity.validateplugincode validation logic. An attacker can achieve arbitrary co...
GHSA-J5QH-5234-4RQP Duplicate Advisory: OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-99qw-6mr3-36qr. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust...
CVE-2026-32920
OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution. Attackers can execute malicious code by including crafted workspace plugins in cloned repositories that execute when users run...
EUVD-2022-37519
Malicious code in bioql PyPI...
CVE-2022-34567
An issue in \Roaming\Mango\Plugins of University of Texas Multi-image Analysis GUI Mango 4.1 allows attackers to escalate privileges via crafted plugins...
CVE-2022-34567
An issue in \Roaming\Mango\Plugins of University of Texas Multi-image Analysis GUI Mango 4.1 allows attackers to escalate privileges via crafted plugins...
CVE-2022-34567
An issue in \Roaming\Mango\Plugins of University of Texas Multi-image Analysis GUI Mango 4.1 allows attackers to escalate privileges via crafted plugins...
CVE-2022-34567
Summary: CVE-2022-34567 affects the University of Texas Multi-image Analysis GUI (Mango) 4.1, specifically the RoamingMangoPlugins directory. A vulnerability in this directory allows attackers to escalate privileges via crafted plugins. The NVD entry lists a high-severity score (CVSS 3.1: 8.8; AV...
CVE-2022-34567
An issue in \Roaming\Mango\Plugins of University of Texas Multi-image Analysis GUI Mango 4.1 allows attackers to escalate privileges via crafted plugins...
PT-2022-22207 · University Of Texas · Mango
Name of the Vulnerable Software and Affected Versions: University of Texas Multi-image Analysis GUI Mango version 4.1 Description: An issue in the RoamingMangoPlugins directory allows attackers to escalate privileges via crafted plugins. Recommendations: For University of Texas Multi-image Analys...