Lucene search
K

10 matches found

EUVD
EUVD
added 2026/04/06 10:53 p.m.1 views

EUVD-2026-18490

OpenClaw's complex interpreter pipelines could skip exec script preflight validation...

5.4CVSS5.9AI score0.00022EPSS
Exploits0References4
NVD
NVD
added 2026/04/02 7:21 p.m.3 views

CVE-2026-34425

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped...

5.4CVSS0.00022EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/02 6:15 p.m.12 views

CVE-2026-34425 OpenClaw - Shell-Bleed Protection Preflight Validation Bypass

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped...

5.4CVSS0.00022EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/02 6:15 p.m.1 views

CVE-2026-34425 OpenClaw - Shell-Bleed Protection Preflight Validation Bypass

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped...

5.4CVSS6.1AI score0.00022EPSS
Exploits0References3
CVE
CVE
added 2026/04/02 6:15 p.m.5 views

CVE-2026-34425

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass in the shell-bleed protection. The bypass lets attackers craft piped, subshell, or command-substitution forms that the parser fails to recognize, enabling execution of blocked script content that would otherwise be bl...

5.4CVSS6.1AI score0.00022EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.1 views

PT-2026-29868

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to commit 8aceaf5 Description OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass in shell-bleed protection. This allows attackers to execute blocked script content by using piped or complex...

5.4CVSS6.1AI score0.00022EPSS
Exploits0References9
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

Computer Software Manufaktur Alibaba 2.0 Piped Command Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1485/info Alibaba Web Server fails to filter piped commands when executing cgi-scripts. This can be used to execute commands with the privileges of the web server process on a target machine...

7.1AI score
Exploits0
IBM AIX
IBM AIX
added 2012/07/16 1:28 p.m.41 views

Vulnerability in AIX sendmail

IBM SECURITY ADVISORY First Issued: Mon Jul 16 13:28:25 CDT 2012 | Updated: Tue Sept 27 9:50:28 CDT 2012 | Update: New ifixes to include sendmailssl and sendmailnossl | Update: Corrected file names | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added...

7.2CVSS6.7AI score0.00065EPSS
Exploits1
exploitpack
exploitpack
added 2000/07/18 12:0 a.m.17 views

Computer Software Manufaktur Alibaba 2.0 - Piped Command

Computer Software Manufaktur Alibaba 2.0 - Piped Command source: https://www.securityfocus.com/bid/1485/info Alibaba Web Server fails to filter piped commands when executing cgi-scripts. This can be used to execute commands with the privileges of the web server process on a target machine...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2000/07/18 12:0 a.m.31 views

Computer Software Manufaktur Alibaba 2.0 - Piped Command

source: https://www.securityfocus.com/bid/1485/info Alibaba Web Server fails to filter piped commands when executing cgi-scripts. This can be used to execute commands with the privileges of the web server process on a target machine. http://victim/cgi-bin/post32.exe|echo%20c:\text.txt...

7.4AI score
Exploits0
Rows per page
Query Builder