3643 matches found
CVE-2026-101880
OpenClaw Windows Node versions before 2026.7.1 are vulnerable to an authorization bypass in the system.run exec-approval policy. The root cause is that the ExecShellWrapperParser fails to correctly split commands on pipe operators or extract command substitutions. This allows connected gateways o...
CVE-2026-101880 OpenClaw Windows Node before 2026.7.1 Authorization Bypass
OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...
CVE-2026-101880 OpenClaw Windows Node before 2026.7.1 Authorization Bypass
OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...
Malicious code in friendly-greeting-tools (PyPI)
Versions 0.1.0 through 0.3.6 of friendly-greeting-tools disguise encoded Snowflake credential and data theft routines as a hello-world demo. In versions through 0.3.5, the default rundemo payload reads the Snowflake session token, connection configuration, dbt profiles, and pip configuration, the...
MAL-2026-17416 Malicious code in friendly-greeting-tools (PyPI)
Versions 0.1.0 through 0.3.6 of friendly-greeting-tools disguise encoded Snowflake credential and data theft routines as a hello-world demo. In versions through 0.3.5, the default rundemo payload reads the Snowflake session token, connection configuration, dbt profiles, and pip configuration, the...
PT-2026-103609
Name of the Vulnerable Software and Affected Versions camel-ai camel versions 0.2.91a1 through 0.2.91a3 Description The shell exec function within the TerminalToolkit allows for shell command execution driven by prompts without an approval boundary, which can lead to shell command injection...
CVE-2026-101880: Incorrect Authorization
OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...
Rocky Linux 9.6 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc (ALMALINUX9.6:CLSA-2025:1767027096)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1767027096 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query...
CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.5:CLSA-2026:1767609927)
The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1767609927 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query strin...
cve-2020-11651-exp-plus
bash로 --exec 매개변수를 실행합니다. 원래 스크립트는 /bin/sh였으므로 bash 리버스 셸과 같은 일부 명령이 호환되지 않습니다. 2. 원래 코드는 로컬 salt-master의 버전을 가져와 원격 호스트가 영향을 받는지 판단했는데, 명백한 논리 오류입니다. 관련 코드를 직접 삭제했습니다. 3. 배치 스캔 기능 추가 python saltstack.py -b targetsfile.txt --threads 16 ,targetfile.txt 내용은 다음과 같습니다. 127.0.0.1:4506...
CVE-2025-69212-PoC
CVE-2025-69212 — OpenSTAManager P7M 명령 주입 PoC OpenSTAManager = 2.9.8 — 악성 .p7m 파일명을 통한 ZIP 업로드 OS 명령 주입 파일: src/Util/XML.php:100 — exec에서 비정화된 $file 벡터: /plugins/importFEZIP/actions.php → ZIP → .p7m 파일명 → exec"openssl smime ... -in "$file" ..." 사용법 리스너 nc -lvnp 4444 익스플로잇 python3...
CVE-2021-27877-PoC
CVE-2021-27877 개념 증명 이 저장소는 Veritas Backup Exec Agent에 영향을 미치는 CVE-2021-27877을 대상으로 하는 원래 Rapid7 Metasploit 모듈의 수정된 버전을 포함합니다. 테스트 중에 원래 Metasploit 모듈은 대상이 취약하다는 것을 성공적으로 식별했지만, 페이로드 전송 단계가 실패하여 세션을 설정하는 데 계속 실패했습니다. 그러나 모듈을 분석한 결과 인증 및 기본 명령 실행 기능은 올바르게 작동하고 있었습니다. 취약점 검증을 단순화하기 위해 페이로드를 업로드하고...
CVE-2026-93348
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-100584
OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...
CVE-2026-100561
OpenClaw npm package 'openclaw' versions = 2026.3.22 and 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign...
CVE-2026-100530
OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directories. Attackers with an allow-always approval can reuse it to run the same command against unreviewed files or repositories with materiall...
EUVD-2026-87381
OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audio command arrays and executes them on a paired node without going through the normal system.run approval flow. In...
EUVD-2026-87467
OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...