Lucene search
K

6 matches found

OSV
OSV
added 2026/04/02 9:0 p.m.2 views

GHSA-3QPV-XF3V-MM45 OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code

Summary Workspace .env can override the bundled hooks root and load attacker hook code Current Maintainer Triage - Status: open - Normalized severity: high - Assessment: v2026.3.28 still lets workspace .env override OPENCLAWBUNDLEDHOOKSDIR, which can replace trusted default-on bundled hooks from ...

8.5CVSS5.9AI score0.00016EPSS
Exploits0References6
CNVD
CNVD
added 2020/07/30 12:0 a.m.1 views

Electrum Python Console Security Vulnerability

Electrum is a lightweight Bitcoin client software, and Python console is one of the Python console programs.A security vulnerability exists in the Python console in Electrum versions 2.9.4 and earlier, and versions 3.x through 3.0.5. The vulnerability can be exploited by an attacker to steal...

6.8AI score
Exploits0References1
CNVD
CNVD
added 2020/05/09 12:0 a.m.1 views

Electrum Python Console Security Vulnerability

Electrum is a lightweight Bitcoin client software, and Python console is one of the Python console programs.A security vulnerability exists in the Python console in Electrum versions 2.9.4 and earlier, and versions 3.x through 3.0.5. The vulnerability can be exploited by an attacker to steal...

6.8AI score
Exploits0
OSV
OSV
added 2018/08/29 7:29 p.m.2 views

CVE-2018-15912

An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove arbitrary packages and package repositories potentially containing hooks with arbitrary code, which will automatically be run as root, or remove packages vital...

7.8CVSS5.9AI score0.00973EPSS
Exploits1References2
NVD
NVD
added 2018/01/27 3:29 p.m.10 views

CVE-2018-6353

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering 1 social-engineering attacks in which a user pastes code that they do not understand and 2 code pasted by a physically proximate attacker at an unattended workstation, which makes...

7.8CVSS6.3AI score0.00107EPSS
Exploits1References2
myhack58
myhack58
added 2007/10/27 12:0 a.m.21 views

Bypassing Anti-Rookit kernel modules scanning techniques-vulnerability warning-the black bar safety net

This article describes some of the methods, you can bypass the current mainstream of the modernAnti-rootkittools, including, but not limited to:Icesword latest version, Gmer latest version, Rootkit unhooker latest version, DarkSpy latest edition and AVG Anti-rootkit latest version, etc. The curre...

7.2AI score
Exploits0
Rows per page
Query Builder