Lucene search
+L

3 matches found

CNVD
CNVD
added 2026/03/24 12:0 a.m.22 views

OpenClaw OS Command Injection Vulnerability (CNVD-2026-15060)

OpenClaw is an automation tool for executing system commands. A security vulnerability exists in versions of OpenClaw prior to 2026.2.22, which stems from a flaw in the security configuration of the sort tool after it is manually added to the tools.exec.safeBins configuration. An attacker can...

8.8CVSS6.1AI score0.00286EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/27 6:31 a.m.6 views

EUVD-2026-8987

In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations such as --compress-prog in allowlist mode, leading to approval-free execution paths that were intended to require approval. Only an exact string such as --compress-program was...

9.9CVSS5.6AI score0.00495EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/01/07 10:29 p.m.331 views

Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity

CVE-2023-42793 Exploit Script Overview This script is des...

9.8CVSS9.8AI score0.99979EPSS
SaveExploits17
Rows per page
Query Builder