60989 matches found
CVE-2025-29557
CVE-2025-29557 – ExaGrid MailConfiguration API Credential Disclosure 📝 Overview Vulnerability Title : SMTP Credential Disclosure via MailConfiguration API Product : ExaGrid EX10 Backup Appliance Versions Affected : 6.3 – 7.0.1.P08 CVE ID : CVE-2025-29557 Severity : High Attack Vector : Remote...
fusionpbx_rce_vulnerability
Preludio Este simple código intenta completar la implementación de la vulnerabilidad encadenada presentada por Dustin Cobb en RCE mediante Caller ID – Múltiples vulnerabilidades en FusionPBX. RCE Pasos de reproducción 1. Abra la pantalla vulnerable del operador en un navegador web, ubicada en est...
CVE-2024-53900
CVE-2024-53900 - Mongoose populate.match $where RCE This repository provides a reproducible vulnerable environment and PoC for CVE-2024-53900 , a critical Remote Code Execution RCE vulnerability in Mongoose 8.8.3. 📌 Vulnerability Details CVE : CVE-2024-53900 Affected : Mongoose 8.8.3 Severity :...
CVE-2025-59470-PostgreSQL-Command-Injection
Software Afectado: PostgreSQL 15.x anterior a 15.7, 16.x anterior a 16.3. Tipo de Vulnerabilidad: Inyección de comandos en la extensión pgbackup. Descripción: La extensión pgbackup no saneza correctamente los parámetros proporcionados por el usuario, lo que permite a un operador de respaldo...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: nerdctl, neuvector-scanner, eksctl, tigera-operator, rancher-helm, kube-arangodb, syft, docker-compose, buildkitd, trivy-operator, kubescape-operator, manifest-tool, kubevela, scorecard, zarf, skaffold, docker, spegel, headlamp, rancher, zot, kubescape,...
Improper Neutralization of Special Elements in Data Query Logic
Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via operator injection in the handleInstallation function in...
EUVD-2026-87764
Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and account blueprints. The access map is gated by a security@: admin.super guard that is resolved by the field's exact path, so a submitted flat dot-notation key such as access.admin.super instead of the...
CVE-2026-100631 Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database querie...
CVE-2026-100631 Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database querie...
CVE-2026-100631 Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database querie...
CVE-2026-100543
OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...
CVE-2026-100588 OpenClaw before 2026.7.1 Authentication Bypass via node.invoke
OpenClaw npm package 'openclaw' before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the node.invoke method, although direct browser.request access requires administrator scope. In Gateway deployments that honor caller identity and...
CVE-2026-100568 OpenClaw before 2026.8.1 Unauthorized Command Job Access
OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...
EUVD-2026-87483
OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...
CVE-2026-100551 OpenClaw iOS Control UI TLS Pin Enforcement Bypass
OpenClaw for iOS versions = 2026.7.1 and 2026.8.11 do not enforce saved Gateway TLS pins in the Control UI. While native connections enforced the saved Gateway fingerprint, the authenticated Terminal and session Dashboard WebViews omitted it. If a user had accepted a Gateway fingerprint, an...
CVE-2026-100543
The OpenClaw npm package (version openclaw before 2026.8.1 ) is vulnerable to information disclosure because it includes deterministic hashes computed over original, unredacted configurations within redacted configuration responses. If the Gateway password has low entropy and other configuration ...
CVE-2026-100543 OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash
OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...
EUVD-2026-87507
OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...
PT-2026-99217
Name of the Vulnerable Software and Affected Versions OpenClaw for iOS versions prior to 2026.8.11 Description The application stores Gateway credentials as cleartext JSON within App Group UserDefaults rather than using the secure device Keychain. This allows attackers who obtain unencrypted devi...