Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/03/03 6:42 p.m.11 views

OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir()

Summary OpenClaw’s Feishu media download flow used untrusted Feishu media keys imageKey / fileKey when building temporary file paths in extensions/feishu/src/media.ts. Because those keys were interpolated directly into temp-file paths, traversal segments could escape the temp directory and redire...

9.1CVSS6AI score0.00339EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.11 views

PT-2026-26005

Summary OpenClaw’s Feishu media download flow used untrusted Feishu media keys imageKey / fileKey when building temporary file paths in extensions/feishu/src/media.ts. Because those keys were interpolated directly into temp-file paths, traversal segments could escape the temp directory and redire...

9.1CVSS5.9AI score0.00339EPSS
SaveExploits0References13
myhack58
myhack58
added 2012/08/07 12:0 a.m.24 views

Joomla joomgalaxy 1.2.0.4 multiple defects and repair-vulnerability warning-the black bar safety net

Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites Author: Daniel Barragan "D4NB4R" Developer: http://www.joomgalaxy.com/ Affected version: 1.2.0.4 last update on Jul 2 7, 2 0 1 2 Test platform: Linuxbt5-Windows7ultimate Description Joomgalaxy is a rich, comprehensive directory component...

7.3AI score
SaveExploits0
Rows per page
Query Builder