229578 matches found
PT-2026-64974
A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astr main agent.py. The manipulation of the argument req.func tool leads to incorrect authorization. The attack may be initiated remotely. The exploit is publicly available...
PT-2026-64992
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function build handoff toolset of the file AstrBot/astrbot/core/astr agent tool exec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be...
CVE-2026-51297
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2026-51296
SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still calls jsonLookupStep with the released pointer. Remote attackers can exploit this flaw to crash the service and leak heap memory information...
relay-secreport-bench
secreport-bench — the Security-Report Benchmark An evaluation...
kernel-nday-exploits
Linux Kernel N-Day Exploits Local privilege escalation rese...
hermes-security-skills
No d...
CVE-2026-17497
NoteGen before 0.32.0 allows arbitrary OS command execution via the Tauri shell plugin shell:allow-execute for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript in the app’s webview can invoke plugin:shell|execute to run attacker-controlled command...
Exploit for CVE-2026-64600
No d...
CVE-2026-17459
CVE-2026-17459 affects SparkJava (up to 2.9.4), specifically the ExternalResourceHandler.java function staticFiles.externalLocation. The vulnerability enables symlink following via manipulations of the externalLocation path, with a remote attack surface. Exploitation is described as Proof-of-Conc...
EUVD-2026-49054
A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink following. It is possib...
CVE-2026-17459 perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink
A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink following. It is possib...
CVE-2026-17458
A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack...
CVE-2026-17457
The CVE-2026-17457 entry affects mf-yang openclaw-cn up to version 0.2.1. The vulnerability resides in the function assertBrowserNavigationAllowed within src/browser/navigation-guard.ts of the Scheme Handler, where manipulation of the url argument leads to information disclosure. The issue can be...
CVE-2026-17457 mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure
A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard.ts of the component Scheme Handler. Such manipulation of the argument url leads to information disclosure. The attack m...
EUVD-2026-49052
A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard.ts of the component Scheme Handler. Such manipulation of the argument url leads to information disclosure. The attack m...
CVE-2026-17434
A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...
CVE-2026-17433
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...
CVE-2026-17434 nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization
A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...