Lucene search
+L

1091 matches found

EUVD
EUVD
•added 2026/02/04 7:55 p.m.•31 views

EUVD-2026-5362

OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the Project Root Path in sshNodeCommand. The sshNodeCommand function constructed a shell script without properly escaping the user-supplied project path in an error message. When th...

7.7CVSS6.3AI score0.01067EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/02/03 10:56 p.m.•251 views

Exploit for CVE-2026-25130

CVE-2026-25130 – Cybersecurity AI CAI Framework Argument Inj...

9.6CVSS6.5AI score0.00919EPSS
SaveExploits3
Positive Technologies
Positive Technologies
•added 2026/02/03 12:00 a.m.•25 views

PT-2026-5851

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges...

8.5CVSS5.9AI score0.00139EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/02/03 12:00 a.m.•20 views

PT-2026-6006

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

4.7CVSS6AI score0.00824EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2026/02/02 11:41 p.m.•15 views

GHSA-Q284-4PVR-M585 OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand

Two related vulnerabilities existed in the macOS application's SSH remote connection handling CommandResolver.swift: Details The sshNodeCommand function constructed a shell script without properly escaping the user-supplied project path in an error message. When the cd command failed, the unescap...

7.7CVSS6.7AI score0.01067EPSS
SaveExploits1References3
CVE
CVE
•added 2026/02/01 2:38 p.m.•40 views

CVE-2020-37048

Iskysoft Application Framework Service 2.4.3.241 is affected by an unquoted service path vulnerability (IsAppService). The vulnerability arises from an unquoted service executable path in the service configuration, enabling local attackers to insert a malicious executable that runs with the servi...

8.5CVSS6.5AI score0.00169EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/20 12:31 a.m.•16 views

SUSE CVE-2025-15536

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

4.4CVSS6.3AI score0.00252EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•13 views

MiracleLinux 7 : okular-4.10.5-9.el7 (AXSA:2020-696:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-696:02 advisory. okular: local binary execution via specially crafted PDF files CVE-2020-9359 Tenable has extracted the preceding description block directly from the...

6.8CVSS6.5AI score0.01464EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/19 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2025-15536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file...

5.5CVSS6.3AI score0.00252EPSS
SaveExploits1References4
osv_ghsa
osv_ghsa
•added 2026/01/18 9:30 a.m.•18 views

GHSA-5PR6-CRVP-2J9F Open Chinese Convert has Out-of-bounds Write

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

5.3CVSS6.3AI score0.00252EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2026/01/18 9:30 a.m.•21 views

Open Chinese Convert has Out-of-bounds Write

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

5.5CVSS6.3AI score0.00252EPSS
SaveExploits1References9Affected Software1
NVD
NVD
•added 2026/01/18 9:15 a.m.•18 views

CVE-2025-15536

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

5.5CVSS0.00252EPSS
SaveExploits1References8
osv_ubuntu
osv_ubuntu
•added 2026/01/18 9:15 a.m.•14 views

UBUNTU-CVE-2025-15536

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

5.5CVSS6.3AI score0.00252EPSS
SaveExploits1References9
UbuntuCve
UbuntuCve
•added 2026/01/18 9:15 a.m.•10 views

CVE-2025-15536

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

5.5CVSS5.9AI score0.00252EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
•added 2026/01/18 9:02 a.m.•30 views

CVE-2025-15536

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

5.5CVSS6.3AI score0.00252EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/01/18 9:02 a.m.•35 views

CVE-2025-15536

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

5.5CVSS6.3AI score0.00252EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/01/18 9:02 a.m.•6 views

CVE-2025-15536 BYVoid OpenCC MaxMatchSegmentation.cpp MaxMatchSegmentation heap-based overflow

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

5.3CVSS6.3AI score0.00252EPSS
SaveExploits1References8
Snyk
Snyk
•added 2026/01/18 5:49 a.m.•12 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the GenImageFontAtlas function. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted input that triggers a heap-based buffer overflow during local execution...

7.8CVSS6.7AI score0.00333EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/18 12:00 a.m.•4 views

CVE-2025-15536: Heap-based Buffer Overflow

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made...

5.5CVSS6.3AI score0.00252EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/14 5:16 a.m.•22 views

CVE-2026-22718

The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine...

6.8CVSS0.00579EPSS
SaveExploits0References1
Rows per page
Query Builder