11 matches found
CVE-2026-100544
openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller...
Malicious code in 9remote (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4160b2e2774d56c9e7373db28a4073d456248d0fe9b55979fa507f0910b65ce0 9remote is a remote-shell tool: its CLI launches an HTTP/WebSocket server and provisions a Cloudflare Quick Tunnel that exposes the host to the publi...
CVE-2026-65975
CVE-2026-65975 affects Pydantic AI AG-UI Adapter (AG-UI via Agent.to_ag_ui()/AGUIAdapter and Vercel AI via VercelAIAdapter) in Pydantic AI versions 1.88.0–1.107.0 and 2.0.0b1–2.4.x. The bug arises because sanitize_messages uses a stripping index computed before sanitization, so when a trailing cl...
CVE-2026-9680 MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...
CVE-2026-9680 MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...
CVE-2026-9680: Initialization of a Resource with an Insecure Default
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and management RMM tools. "The victim was directed through compromised web infrastructure to a counterfeit Microsoft Store page claiming...
Moukthar - Android Remote Administration Tool
Remote adminitration tool for android Features Permissions bypass android 12 below https://youtube.com/shorts/-w8H0lkFxb0 Keylogger https://youtube.com/shorts/Ll9dNrkjFOA Notifications listener SMS listener Phone call recording Image capturing and screenshots Video recording Persistence Read &...
DcRat - A Simple Remote Tool Written In C#
DcRat is a simple remote tool written in C Introduction Features TCP connection with certificate verification, stable and security Server IP port can be archived through link Multi-Server,multi-port support Plugin system through Dll, which has strong expansibility Super tiny client size about 405...
HelpU 安全漏洞
HelpU agent is a software from HelpU Korea that uses remote control technology to resolve issues by allowing direct viewing of a customer's computer screen. It makes customer support easier and better. helpUS remote administration tool has a security vulnerability that stems from incorrect...
