GHSA-6336-QQW9-V6X6 OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message

Summary Discord Component Interaction Misclassifies Group DM as Direct Message Current Maintainer Triage - Status: narrow - Normalized severity: low - Assessment: Real on shipped v2026.3.24 component-interaction routing/auth in extensions/discord/src/monitor/agent-components-helpers.ts, but impac...

PT-2026-30195

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The affected element is an unknown function of the file /admin panel/settings.php of the component Profile Picture Handler. This manipulation of the argument File causes...

The vulnerability in the function intel_thpciprobe() of the driver/hwtracing/intel_th/pci.c file of the Linux operating system’s hardware tracing driver allows a hacker to cause a service failure.

The vulnerability of the intelthpciprobe function in the drivers/hwtracing/intelth/pci.c file of the Linux kernel’s hardware tracing driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads

A packaging error in Anthropic’s Claude Code npm release briefly exposed internal source code. This entry examines how threat actors rapidly weaponized the resulting attention, pivoting an existing AI-themed campaign to spread Vidar and GhostSocks...

Credential Leakage in LLM Agent Skills: A Large-Scale Empirical Study

Third-party skills extend LLM agents with powerful capabilities but often handle sensitive credentials in privileged environments, making leakage risks poorly understood. We present the first large-scale empirical study of this problem, analyzing 17,022 skills sampled from 170,226 on SkillsMP usi...

PT-2026-30189

A security vulnerability has been detected in mixelpixx Google-Research-MCP 1e062d7bd887bfe5f6e582b6cc288bb897b35cf2/ca613b736ab787bc926932f59cddc69457185a83. This issue affects the function extractContent of the file src/services/content-extractor.service.ts of the component Model Context Protoc...

PT-2026-30277

Name of the Vulnerable Software and Affected Versions Electron versions 33.0.0-alpha.1 through 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5 Description Electron applications utilizing offscreen rendering with GPU shared textures may experience a use-after-free condition. Specifically, the release...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the l2capunregisteruser function allowing reusage after release, potentially leading to list...

Linux Distros Unpatched Vulnerability : CVE-2026-23412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: bpf: defer hook memory release until rcu readers are done Yiming Qian reports UaF when concurrent process is dumping hooks via nfnetlinkhooks: BUG:...

ZimaOS 代码问题漏洞

ZimaOS is an open-source operating system project by IceWhaleTech, aimed at providing a lightweight, high-performance, and secure operating environment. Versions of ZimaOS prior to 1.5.3 had code vulnerabilities. These vulnerabilities stemmed from the exposed proxy endpoints in the web interface,...

PT-2026-30188

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.33.4 Description Budibase, an open-source low-code platform, contains a server-side request forgery SSRF vulnerability in its REST datasource connector. The platform's SSRF protection is ineffective because the...

PT-2026-30160

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the drm/xe driver allows local privilege escalation due to insufficient protection of GGTT MMIO access. The protection mechanism using drm dev enter fails if the driver load...

LiteLLM 1.82.7 / 1.82.8 Supply Chain Compromise (GHSA-5mg7-485q-xm76)

The version of the LiteLLM Python package installed on the remote host is 1.82.7 or 1.82.8. These versions were published to PyPI by a threat actor known as TeamPCP using compromised maintainer credentials obtained through the Aqua Security Trivy supply chain attack. The malicious releases contai...

The vulnerability of the __submit_discard_cmd() function in the fs/f2fs/segment.c module of the Linux file system F2FS allows a attacker to trigger a service failure.

The vulnerability of the submitdiscardcmd function in the fs/f2fs/segment.c file of the Linux kernel’s File System F2FS module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the __ocfs2MoveExtent() function in the fs/ocfs2/move_extents.c module of the OCFS2 file system in the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of the ocfs2MoveExtent function in the fs/ocfs2/moveextents.c file of the OCFS2 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_ring_fini() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the amdgpuringfini function in the drivers/gpu/drm/amd/amdgpu/amdgpuring.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the pch_uart_exit_port() function in the drivers/tty/serial/pch_uart.c file of the console TTY driver in the Linux kernel’s serial port module allows a attacker to cause a service failure.

The vulnerability of the pchuartexitport function in the drivers/tty/serial/pchuart.c file of the TTY driver for the console TTY serial port in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service...

PT-2026-30129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw where nand lock and nand unlock functions did not hold the NAND device lock when calling chip-ops.lock area/unlock area. This could lead to race...

The vulnerability of the ipu6_buttress_isr() function in the drivers/media/pci/intel/ipu6/ipu6-buttress.c file of the Linux multimedia device driver module allows a attacker to cause a service failure.

The vulnerability of the ipu6buttressisr function in the drivers/media/pci/intel/ipu6/ipu6-buttress.c file of the Linux multimedia device support driver module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of file handle connections during the replay of persistent handles v2. This cou...