145758 matches found
CVE-2026-35654
OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Microsoft Teams feedback invokes that allows unauthorized senders to record session feedback. Attackers can bypass sender allowlist checks via feedback invoke endpoints to trigger unauthorized feedback recording or...
CVE-2026-35654
OpenClaw before 2026.3.25 has an authorization bypass in Microsoft Teams feedback invoke endpoints that lets an unauthorized sender trigger recording of session feedback or reflection. Attackers can bypass sender allowlists, enabling unauthorized access to feedback-related actions. The cited CVE ...
CVE-2026-35654
OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Microsoft Teams feedback invokes that allows unauthorized senders to record session feedback. Attackers can bypass sender allowlist checks via feedback invoke endpoints to trigger unauthorized feedback recording or...
CVE-2026-35654 OpenClaw < 2026.3.25 - Authorization Bypass in Microsoft Teams Feedback Invoke
OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Microsoft Teams feedback invokes that allows unauthorized senders to record session feedback. Attackers can bypass sender allowlist checks via feedback invoke endpoints to trigger unauthorized feedback recording or...
EUVD-2026-21454
OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Microsoft Teams feedback invokes that allows unauthorized senders to record session feedback. Attackers can bypass sender allowlist checks via feedback invoke endpoints to trigger unauthorized feedback recording or...
CVE-2026-35654 OpenClaw < 2026.3.25 - Authorization Bypass in Microsoft Teams Feedback Invoke
OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Microsoft Teams feedback invokes that allows unauthorized senders to record session feedback. Attackers can bypass sender allowlist checks via feedback invoke endpoints to trigger unauthorized feedback recording or...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Exploit for CVE-2022-30190
CVE-2022-30190 Follina Educational Malware Development, Expl...
apparmor: fix differential encoding verification
...
apparmor: Fix double free of ns_name in aa_replace_profiles()
...
Sleuth Kit tsk_recover Path Traversal
...
GHSA-PW2V-CMFH-X2P3 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-aws, linux-azure, linux-vmware...
CVE-2026-23208 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-aws, linux-azure, linux-vmware...
PT-2026-32047
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A user interface misrepresentation allows an attacker to perform spoofing over a network. Recommendations At the moment, there is no information about a newer version th...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser included with Windows 10 and later versions of the operating system developed by Microsoft. There is a security vulnerability in Microsoft Edge, which stems from errors in the handling of critical information within the Edge browser based on the Chromium kernel. Th...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser included with Windows 10 and later versions of the Microsoft operating system. There is a security vulnerability in Microsoft Edge, which stems from incorrect user interface representations of critical information, potentially leading to network spoofing attacks...
📄 Microsoft MMC MSC EvilTwin Local Admin Creation
Microsoft MMC MSC EvilTwin local admin creation exploit. !/usr/bin/env python3 Exploit Title: Microsoft MMC MSC EvilTwin - Local Admin Creation Date: 2025-11-22 Author: Mohammed Idrees Banyamer Author Country: Jordan GitHub: https://github.com/mbanyamer Vendor Homepage: https://www.microsoft.com...
PT-2026-32046
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description Microsoft Edge is susceptible to a spoofing issue. The vulnerability's severity has been increased. The issue is related to the browser's ability to accurately represent...
CVE-2026-39361
OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validateenrichmenturl function in src/handler/http/request/enrichmenttable/mod.rs fails to block IPv6 addresses because Rust's url crate returns them with surrounding brackets e.g. "::1" not "::1". An authenticated...
On Microsoft’s Lousy Cloud Security
ProPublica has a scoop: In late 2024, the federal government's cybersecurity evaluators rendered a troubling verdict on one of Microsoft's biggest cloud computing offerings. The tech giant's "lack of proper detailed security documentation" left reviewers with a "lack of confidence in assessing th...