59044 matches found
GHSA-PMF3-2Q63-JMP6 Duplicate Advisory: OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7xr2-q9vf-x4r5. This link is maintained to preserve external references. Original Description OpenClaw through 2026.2.22 contains a symlink traversal vulnerability in agents.create and agents.update handlers tha...
Chamilo LMS 安全特征问题漏洞
Chamilo LMS is an open-source online learning and collaboration system developed by Chamilo. This system supports the creation of teaching content, remote training, and online quizzes. Versions of Chamilo LMS prior to 1.11.38 and 2.0.0-RC.3 contained security vulnerabilities. These vulnerabilitie...
PT-2026-32039
Name of the Vulnerable Software and Affected Versions goshs versions prior to 2.0.0-beta.4 Description goshs fails to enforce the per-folder .goshs Access Control List ACL and basic authentication mechanism for state-changing routes. While authorization is correctly applied to directory listings...
goshs 安全漏洞
Goshs is a simple HTTP server developed by Patrick Hener using Go language. Versions of Goshs prior to 2.0.0-beta.4 contained security vulnerabilities. These vulnerabilities stemmed from the lack of enforcing identical authorization checks for state-changing routes, which allowed unauthenticated...
PT-2026-31926
CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f k levels list parameter in user creation requests. Attackers can modify the parameter value from 4 to 10 in the HTTP request body to bypass...
Chamilo LMS 安全漏洞
Chamilo LMS is an open-source online learning and collaboration system developed by Chamilo. This system supports the creation of teaching content, remote training, and online quizzes. Prior to version 1.11.38 of Chamilo LMS, there were security vulnerabilities. These vulnerabilities stemmed from...
PT-2026-32021
Chamilo LMS is a learning management system. Prior to 1.11.38, any authenticated user with a REST API key can modify their own status field via the update user from username endpoint. A student status=5 can change their status to Teacher/CourseManager status=1, gaining course creation and...
CVE-2026-5984
creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:56+00:00| published-proof-of-concept| Telegram/jvxENlxS5zD0hLDn-51kxH7F1GhkNHxvGXTHS6t1bT7Jtk 2026-04-10 00:45:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116377643347079657 2026-04-10 01:02:28+00:00| seen|...
CVE-2026-5263
creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:50+00:00| seen| Telegram/aaKaZzhZCQTbBESVtGmK3HO5aOAiXiyEGsKbx2XTc93AVKM 2026-07-02 13:30:05+00:00| seen| https://infosec.place/objects/8217d0cb-8282-473a-a92e-d3e5597ac7c9...
GHSA-4WR3-F4P3-5WJH
creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:43+00:00| seen| Telegram/1cCualjPQDoYUsDnolnQpk7NGC4b1xwJPWps9hRWMxLLCE...
GHSA-Q5R4-47M9-5MC7
creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:43+00:00| seen| Telegram/1cCualjPQDoYUsDnolnQpk7NGC4b1xwJPWps9hRWMxLLCE...
GHSA-48VW-M3QC-WR99
creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo...
GHSA-H4JX-HJR3-FHGC
creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo...
CVE-2026-5979
creationtimestamp| type| source ---|---|--- 2026-04-09 23:29:26+00:00| published-proof-of-concept| Telegram/RnbO6h7rE-8F1e1uXIlS73R4kRuAIo63byQ11pUP09Fz6LA 2026-04-10 08:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4u4vgkp72r 2026-05-26 03:37:06+00:00| seen|...
CVE-2026-40086
creationtimestamp| type| source ---|---|--- 2026-04-09 23:10:57+00:00| published-proof-of-concept| https://github.com/danielgatis/rembg/security/advisories/GHSA-3wqj-33cg-xc48 2026-04-10 08:17:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40086...
CVE-2026-35646
creationtimestamp| type| source ---|---|--- 2026-04-09 22:24:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3ty7lp232t...
CVE-2026-35640
creationtimestamp| type| source ---|---|--- 2026-04-09 22:17:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3tkahnne2i...
CVE-2026-35644
creationtimestamp| type| source ---|---|--- 2026-04-09 22:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3tefpiov2s...