4 matches found
MAL-2026-5577 Malicious code in web-pool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b1d78cd3ff0c5eeead299eb670d299590b48a453c9416ae2a692bc4173737c Requiring web-pool triggers middleware to spawn a detached node lib/initializeCaller.js. That script base64-decodes a hardcoded endpoint...
copy.fail.ocp-poc
Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC...
Exploit for CVE-2026-31431
Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC...
OpenClaw: Silent privilege escalation via gateway shared-auth reconnect
Summary Gateway local shared-auth reconnect silently widens paired device scope from operator.read to operator.admin and reach node RCE Affected Packages / Versions - Package: openclaw - Affected versions: = 2026.3.24 - First patched version: 2026.3.25 - Latest published npm version at verificati...