Lucene search
+L

43467 matches found

Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.14 views

PT-2026-58593

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows DHCP Server, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A...

9.8CVSS6.5AI score0.00996EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.19 views

PT-2026-58134

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A heap-based buffer overflow exists in Windows DHCP Server, which allows an authorized attacker to execute arbitrary code over a network. A heap-based buffer overflow occurs when ...

8.8CVSS6.7AI score0.00763EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.7 views

Security Update for Microsoft ASP.NET Core (CVE-2026-56170)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by a denial of service vulnerability as referenced in the vendor advisory. - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to den...

7.5CVSS5.4AI score0.01008EPSS
SaveExploits0References11
Oracle linux
Oracle linux
added 2026/07/14 12:0 a.m.7 views

host-metering security update

1.2.0-4.0.1 - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 Orabug: 39352233...

7.5CVSS6.9AI score0.00621EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.7 views

PT-2026-57995

Name of the Vulnerable Software and Affected Versions Eclipse Jetty affected versions not specified Description For HTTP/1, HTTP/2, and HTTP/3 requests, the software fails to strictly verify that the request authority comprising the host and port matches the information provided in the Host heade...

5.3CVSS5.2AI score0.00196EPSS
SaveExploits0References17
NVD
NVD
added 2026/07/13 10:16 p.m.9 views

CVE-2026-62199

OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller or configured input path can supply crafted environment variables to execute or persist actions...

8.8CVSS0.00295EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/13 10:7 p.m.16 views

Malicious code in node-fsagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a0392a3ddea9b6099e8501fdb827f586a410323cecea214aa50fc1be42183b The package tarball ships archive-sender.js, which archives the host path /root/.codex, splits the tar into 200MB chunks, reconstructs an npm registr...

6.1AI score
SaveExploits0References10
OSV
OSV
added 2026/07/13 10:7 p.m.6 views

MAL-2026-10506 Malicious code in node-fsagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a0392a3ddea9b6099e8501fdb827f586a410323cecea214aa50fc1be42183b The package tarball ships archive-sender.js, which archives the host path /root/.codex, splits the tar into 200MB chunks, reconstructs an npm registr...

6.1AI score
SaveExploits0References10
OSV
OSV
added 2026/07/13 9:32 p.m.5 views

MAL-2026-10498 Malicious code in eslint-angular-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a6248527167bc121cdf2c1a874adbc9d433dbe4be2aed160e8abb3eb2ca63b package.json declares a preinstall lifecycle script that runs curl against the hardcoded bare IP http://109.71.252.153:8080/ at npm install time,...

5.5AI score
SaveExploits0References2
CVE
CVE
added 2026/07/13 9:30 p.m.19 views

CVE-2026-62200

OpenClaw

8.8CVSS6.2AI score0.00295EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/07/13 9:30 p.m.4 views

CVE-2026-62200 OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport

OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended...

8.7CVSS6.2AI score0.00295EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/13 9:30 p.m.6 views

CVE-2026-62200

OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended...

8.8CVSS6.2AI score0.00295EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/13 9:30 p.m.4 views

CVE-2026-62199

OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller or configured input path can supply crafted environment variables to execute or persist actions...

8.8CVSS6.2AI score0.00295EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/13 9:30 p.m.36 views

CVE-2026-62199

Summary (based on provided documents): OpenClaw versions prior to 2026.6.6 contain a flaw in host execution environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller or configured input path may supply crafted envir...

8.8CVSS6.2AI score0.00295EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/07/13 9:30 p.m.8 views

CVE-2026-62199 OpenClaw < 2026.6.6 Authentication Bypass via Environment Filtering

OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller or configured input path can supply crafted environment variables to execute or persist actions...

8.7CVSS6.2AI score0.00295EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/13 6:9 p.m.12 views

Malicious code in @spzhongwin/skill-logger-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970980f38a6389d5b622ca41ba3b418f1538b2a38f595536c97acb934012b8b9 The package advertises itself as a skill usage/error logger but, when activated via the openclaw gatewaystart hook, opens a persistent WebSocket to a...

6.3AI score
SaveExploits0References4
OSV
OSV
added 2026/07/13 5:55 p.m.2 views

SUSE-SU-2026:2926-1 Security update for curl

This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for different services bsc1268407. - CVE-2026-8924: traling dot domain super cookie bsc1268409. - CVE-2026-8927: env-set cross-proxy Digest auth state leak...

9.8CVSS6.1AI score0.00584EPSS
SaveExploits10References21
OSV
OSV
added 2026/07/13 5:53 p.m.4 views

SUSE-SU-2026:2925-1 Security update for curl

This update for curl fixes the following issues - CVE-2026-4873: connection reuse ignores TLS requirement bsc1262631. - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for different services bsc1268407. - CVE-2026-8924: traling dot domain super cookie...

9.8CVSS6.3AI score0.00584EPSS
SaveExploits11References23
NVD
NVD
added 2026/07/13 4:16 p.m.8 views

CVE-2026-58065

The Apache Airflow Git provider runs its git-over-SSH operations with StrictHostKeyChecking=no by default, disabling SSH host-key verification. An attacker who can intercept the network path between an Airflow worker and the Git server can impersonate the server man-in-the-middle, capturing the S...

8.1CVSS0.00477EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/13 3:35 p.m.4 views

PYSEC-2026-2902 PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings

Summary PraisonAI's spidertools URL validation can be bypassed using alternate loopback host encodings. The affected component is: text praisonaiagents/tools/spidertools.py The tool contains a URL validation function intended to block local or unsafe targets before fetching attacker-controlled...

5.5CVSS6.3AI score0.00165EPSS
SaveExploits0References5
Rows per page
Query Builder