4728 matches found
METATRON AI Penetration Testing
Metatron is a CLI-based AI penetration testing assistant that runs entirely on your local machine - no cloud, no API keys, no subscriptions. You give it a target IP or domain. It runs real recon tools nmap, whois, whatweb, curl, dig, nikto, feeds all results to a locally running AI model, and the...
Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaign
After hackerbot-claw, another AI-powered campaign exploiting pullrequesttarget confirms the threat is here to stay. We trace the attacker back to three weeks before anyone noticed...
@altipla/directus-sdk-utils (0.7.2), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.6) +5 more potentially affected by CVE-2026-35441 via directus (>=11.0.0, <=11.16.1)
directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =34.0.1 - @fahami/directus-pkce 1.0.0 - abcprotocol 0.0.1 Source cves: CVE-2026-35441 Source advisory: SNYK:JS-DIRECTUS-15907601...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34764 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34764 Source advisory: SNYK:JS-ELECTRON-15907847...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34779 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34779 Source advisory: OSV:GHSA-5RQW-R77C-JP79...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34778 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34778 Source advisory: SNYK:JS-ELECTRON-15876436...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34777 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34777 Source advisory: SNYK:JS-ELECTRON-15876718...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34776 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34776 Source advisory: SNYK:JS-ELECTRON-15876361...
@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34770 via electron (>=39.0.0, <=39.2.7)
electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34770 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34770 Source advisory: OSV:GHSA-JJP3-MQ3X-295M...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +9 more potentially affected by CVE-2026-34769 via electron (>=40.0.0, <=40.6.1)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =2.0.4, =3.24.1 Source cves: CVE-2026-34769 Source advisory: OSV:GHSA-9WFR-W7MM-PC7F...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34768 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34768 Source advisory: SNYK:JS-ELECTRON-15876117...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34768 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34768 Source advisory: OSV:GHSA-JFQX-FXH3-C62J...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34767 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34767 Source advisory: SNYK:JS-ELECTRON-15875973...
The vulnerability of the cfg80211_6ghz_power_type_valid() function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, allows a hacker to cause a service failure.
The vulnerability of the cfg802116ghzpowertypevalid function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, is related to incorrect data validation. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the nl80211_parse_sched_scan() function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernels, allows a hacker to cause a service failure.
The vulnerability of the nl80211parseschedscan function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernels, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the rtw89_scan_get_6g_disabled_chan() function in the drivers/net/wireless/realtek/rtw89/fw.c driver module of the Realtek wireless adapter support library in the Linux kernel allows a hacker to induce a service failure.
The vulnerability of the rtw89scanget6gdisabledchan function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless adapter support driver in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Improper Check for Unusual or Exceptional Conditions
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions due to the plugin installation process. An attacker can bypass intended security restrictions by exploiting a failure in the security...
OpenClaw: Security Scan Failure Does Not Block Plugin Installation (Fail-Open)
Summary Security Scan Failure Does Not Block Plugin Installation Fail-Open Current Maintainer Triage - Status: open - Normalized severity: low - Assessment: Real in shipped v2026.3.28 plugin install flow, but low severity fits because it still requires an operator to choose installation of an...
