864 matches found
Serverless-Top-10-Project
This is the markdown version of the OWASP Top 10 - Serverless Interpretation report...
BinAbsInspector
¿Qué es BinAbsInspector? BinAbsInspector Binary Abstract Inspector es un analizador estático para la ingeniería inversa automatizada y el escaneo de vulnerabilidades en binarios, que es un proyecto de investigación a largo plazo incubado en Keenlab. Está basado en interpretación abstracta con el...
starlette-host-header-lab
Starlette Host-Header URL Confusion Lab X41-2026-002 A self-contained, containerized training lab reproducing the Starlette authentication-bypass vulnerability disclosed by X41 D-Sec. Advisory: X41-2026-002 GHSA: GHSA-86qp-5c8j-p5mr CWE: 436 — Interpretation Conflict / Untrusted Input in Function...
Log4Shell-CVE-2021-44228-Demo
CVE-2021–44228 Demo 1. Introducción a CVE-2021–44228 La noticia más grande en el mundo de la ciberseguridad a finales de 2021 fue la vulnerabilidad de Log4j, numerada como CVE-2021-44228, también conocida como Log4Shell. Fue clasificada con la puntuación máxima de gravedad de 10 en el sistema de...
CentOS Linux 8.4 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (CENTOS8.4:CLSA-2025:1754939766)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1754939766 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations an...
CVE-2026-101909
Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited serialization options and visitor properties supplied through prototype pollution. A separate same-process prototype-pollution flaw supplies inherited...
UBUNTU-CVE-2026-101909
Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited serialization options and visitor properties supplied through prototype pollution. A separate same-process prototype-pollution flaw supplies inherited...
CVE-2026-101909: Improperly Controlled Modification of Object Prototype Attributes
Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited serialization options and visitor properties supplied through prototype pollution. A separate same-process prototype-pollution flaw supplies inherited...
PT-2026-99952
Name of the Vulnerable Software and Affected Versions Axios versions 0.28.0 through 0.33.x Axios versions 1.15.1 through 1.19.x Description ToFormData processes inherited serialization options and visitor properties supplied through prototype pollution, a condition where an attacker can manipulat...
CVE-2026-88773
Inconsistent interpretation of HTTP requests 'HTTP Request/Response smuggling' vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIP...
CVE-2026-88773 HTTP Request Smuggling
Inconsistent interpretation of HTTP requests 'HTTP Request/Response smuggling' vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIP...
EUVD-2026-87961
Inconsistent interpretation of HTTP requests 'HTTP Request/Response smuggling' vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIP...
Incorrect Authorization
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via glob metacharacter interpretation and node display name reuse in file-transfer allow-always approvals. When an operator approves a file-transfer request, a lat...
CVE-2026-100529
OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for unreviewed paths. Attackers can exploit glob metacharacter interpretation and node display name reuse to access siblin...
CVE-2026-100529 OpenClaw before 2026.8.1 Authorization Scope Widening via File-Transfer
OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for unreviewed paths. Attackers can exploit glob metacharacter interpretation and node display name reuse to access siblin...
CVE-2026-100529
Versions of OpenClaw before 2026.8.1 are vulnerable to an authorization scope widening flaw within file-transfer allow-always approvals. This issue allows attackers to reuse standing grants for unreviewed paths by exploiting glob metacharacter interpretation and node display name reuse . Conseque...
EUVD-2026-87521
OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for unreviewed paths. Attackers can exploit glob metacharacter interpretation and node display name reuse to access siblin...
CVE-2026-100529 OpenClaw before 2026.8.1 Authorization Scope Widening via File-Transfer
OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for unreviewed paths. Attackers can exploit glob metacharacter interpretation and node display name reuse to access siblin...
CVE-2026-100529 OpenClaw before 2026.8.1 Authorization Scope Widening via File-Transfer
OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for unreviewed paths. Attackers can exploit glob metacharacter interpretation and node display name reuse to access siblin...
CVE-2026-100529: Incorrect Authorization
OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for unreviewed paths. Attackers can exploit glob metacharacter interpretation and node display name reuse to access siblin...