93 matches found
EUVD-2025-210271
picklescan before 0.0.27 contains a parsing logic error in the listglobals function when handling STACKGLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files with arguments at position zero to trigg...
CVE-2026-53810
OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanned package payloads. Attackers with trusted operator access can manipulate extension metadata to load plugin code outside reviewed package entry points...
CVE-2026-53810 OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata
OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanned package payloads. Attackers with trusted operator access can manipulate extension metadata to load plugin code outside reviewed package entry points...
Kubernetes Security Scanning: A DevSecOps Guide
A clean container image is not proof of a secure Kubernetes workload. New CVEs, unsafe configurations, and excessive permissions can turn an approved deployment into an active exposure. Contact Hive Pro to review your Kubernetes container security priorities. Kubernetes security scanning is the...
osv-java-poc
OSV Scanner CVE Detection POC — Vulnerable Java App ⚠️ WA...
Exploiting LLM Agent Supply Chains Via Payload-Less Skills
Autonomous agents powered by Large Language Models LLMs acquire external functionalities through third-party skills available in open marketplaces. Adopting these integrations broadens the potential attack surface, prompting a need for systematic security evaluation. Current auditing mechanisms a...
Exploit for CVE-2026-24049
wheelaudit Python Wheel File Security Scanner — scan .wh...
Exploit for Deserialization of Untrusted Data in Facebook React
🛡️ CVE-2025-55182 Security Tools Complete toolset for detec...
MCP Watch 操作系统命令注入漏洞
MCP Watch is a comprehensive security scanning program for Model Context Protocol servers by the individual developer Kapil Duraphe. An operating system command injection vulnerability exists in MCP Watch version 0.1.2 and earlier, which stems from command injection and could lead to arbitrary...
EUVD-2020-7381
Malware in sbrugna...
Fedora 41 : lemonldap-ng (2025-67d99d2c39)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-67d99d2c39 advisory. See https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-21-3-is-out/ Tenable has extracted the preceding description block directly from the Fedora...
vuls
This is an open-source vulnerability scanner for Linux and FreeBSD, written in Go. It is an agentless scanner, meaning it does not require any additional software to be installed on the target systems. The scanner is designed to be easy to use and provides a simple command-line interface. The...
WordPress plugin Security Ninja 安全漏洞
WordPress Security Ninja is a plugin that focuses on website security protection, providing automated security scanning, login protection, IP blocking, and two-factor authentication to help users proactively identify security risks and prevent hacker attacks. WordPress Security Ninja has an...
Reolink Network Camera Detection
Binary data reolinknetworkcameradetect.nbin...
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 9, 2025 to June 15, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...
Rockwell Automation FactoryTalk Updater Web Client Detection
Binary data rockwellfactorytalkupdaterwebclientdetect.nbin...
Dell Trusted Device Installed (Windows)
Binary data delltrusteddevicewininstalled.nbin...
5 Impactful AWS Vulnerabilities You're Responsible For
If you're using AWS, it's easy to assume your cloud security is handled - but that's a dangerous misconception. AWS secures its own infrastructure, but security within a cloud environment remains the customer's responsibility. Think of AWS security like protecting a building: AWS provides strong...
Astrill VPN Installed (Windows)
Binary data astrillvpnwininstalled.nbin...
Fedora 41 : jupyterlab (2025-e50201543b)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e50201543b advisory. Update to 4.3.6 rhbz2352545 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...