CVE-2026-27113

Liquid Prompt is an adaptive prompt for Bash and Zsh. Starting in commit cf3441250bb5d8b45f6f8b389fcdf427a99ac28a and prior to commit a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c on the master branch, arbitrary command injection can lead to code execution when a user enters a directory in a Git...

UBUNTU-CVE-2026-27113

Liquid Prompt is an adaptive prompt for Bash and Zsh. Starting in commit cf3441250bb5d8b45f6f8b389fcdf427a99ac28a and prior to commit a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c on the master branch, arbitrary command injection can lead to code execution when a user enters a directory in a Git...

GHSA-GV8R-9RW9-9697

creationtimestamp| type| source ---|---|--- 2026-02-20 21:40:40+00:00| seen| https://gist.github.com/alon710/4cd1875c786b514610f28029ba8d8c98...

CVE-2026-2853

creationtimestamp| type| source ---|---|--- 2026-02-20 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcyvdcvl72c 2026-02-24 05:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mflf3o47j42m...

CVE-2021-35402

PROLiNK PRC2402M 20190909 before 2021-06-13 allows liveapi.cgi?page=satellitelist OS command injection via shell metacharacters in the ip parameter for satellitestatus...

CVE-2026-24891

creationtimestamp| type| source ---|---|--- 2026-02-20 18:32:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcqltw7ab2h 2026-02-24 20:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmzmeuhn223...

CVE-2026-2885

creationtimestamp| type| source ---|---|--- 2026-02-20 17:35:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116104163122684263 2026-02-21 21:19:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mffkf3kxom2k 2026-02-21 21:19:33+00:00| seen|...

BIT-TOMCAT-2026-24734 Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass

Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native and Tomcat's FFM port of the Tomcat Native code did not complete verification or freshness checks on the OCSP response which could allow certificate revocation to be bypasse...

CVE-2017-4565

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-4155

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2026-26050

creationtimestamp| type| source ---|---|--- 2026-02-20 03:00:30+00:00| seen| https://jvn.jp/en/jp/JVN69531868/ 2026-02-20 09:19:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfbrq5p4nf2t 2026-02-20 10:30:36+00:00| seen|...

Fedora: Security Advisory (FEDORA-2026-60e8919a4a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-35402

PROLiNK PRC2402M 20190909 before 2021-06-13 allows liveapi.cgi?page=satellitelist OS command injection via shell metacharacters in the ip parameter for satellitestatus...

CVE-2021-35402

CVE-2021-35402 affects PROLiNK PRC2402M firmware prior to 2021-06-13. The issue is an OS command injection in live_api.cgi when handling page=satellite_list (satellite_status) via the ip parameter, caused by shell metacharacters in user input. Impact is arbitrary command execution on vulnerable d...

CVE-2021-35402

PROLiNK PRC2402M 20190909 before 2021-06-13 allows liveapi.cgi?page=satellitelist OS command injection via shell metacharacters in the ip parameter for satellitestatus...

CVE-2026-26326 OpenClaw skills.status could leak secrets to operator.read clients

OpenClaw is a personal AI assistant. Prior to version 2026.2.14, skills.status could disclose secrets to operator.read clients by returning raw resolved config values in configChecks for skill requires.config paths. Version 2026.2.14 stops including raw resolved config values in requirement check...

CVE-2026-26326 OpenClaw skills.status could leak secrets to operator.read clients

OpenClaw is a personal AI assistant. Prior to version 2026.2.14, skills.status could disclose secrets to operator.read clients by returning raw resolved config values in configChecks for skill requires.config paths. Version 2026.2.14 stops including raw resolved config values in requirement check...

CVE-2026-26326

CVE-2026-26326 affects the OpenClaw OpenClaw AI assistant. Before version 2026.2.14, the function skills.status could disclose secrets to operator.read clients by returning raw resolved config values in configChecks for requires.config paths. The fix in 2026.2.14 stops including raw resolved conf...

GHSA-FH3F-Q9QW-93J9

creationtimestamp| type| source ---|---|--- 2026-02-19 20:10:40+00:00| seen| https://gist.github.com/alon710/85b1f7a719954f294f29981a82d63310...

CVE-2025-4521

creationtimestamp| type| source ---|---|--- 2026-02-19 17:16:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfa3vuahhi2d 2026-02-19 17:16:50+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116098424956279178...