Lucene search
+L

3 matches found

CNVD
CNVD
•added 2026/03/24 12:00 a.m.•32 views

OpenClaw OS Command Injection Vulnerability (CNVD-2026-15060)

OpenClaw is an automation tool for executing system commands. A security vulnerability exists in versions of OpenClaw prior to 2026.2.22, which stems from a flaw in the security configuration of the sort tool after it is manually added to the tools.exec.safeBins configuration. An attacker can...

8.8CVSS6.1AI score0.00405EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/27 6:31 a.m.•14 views

EUVD-2026-8987

In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations such as --compress-prog in allowlist mode, leading to approval-free execution paths that were intended to require approval. Only an exact string such as --compress-program was...

9.9CVSS5.8AI score0.00632EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2024/01/07 10:29 p.m.•345 views

Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity

CVE-2023-42793 Exploit Script Overview This script is des...

9.8CVSS9.8AI score0.99988EPSS
SaveExploits19
Rows per page
Query Builder