145 matches found
PT-2026-135457
OwnTone Server through 29.3 contains an sql injection vulnerability in mpd sticker find in src/mpd.c that allows unauthenticated remote attackers to inject SQL via the URI argument. Attackers can send a crafted 'sticker find song' command to the MPD listener on TCP port 6600 to bypass path...
THM-TheStickerShop
TryHackMe: The Sticker Shop - Complete Technical Writeup A co...
Telegram-0-Click-RCE-SECURITY-VULNERABILITY-ANALYSIS-REPORT
π΄ Telegram 0-Click RCE Vulnerability Analysis Report ZDI-CAN-30207 | CVSS 9.8 CRITICAL | Unpatched as of 2026-03-30 Author: Dennis Kim @gameworkerkim Date: March 30, 2026 Contact: [email protected] π Summary Badges 1. Vulnerability Overview Executive Summary This is a zero-click remote code...
Missing Authorization
Overview @openclaw/discord is an OpenClaw Discord channel plugin Affected versions of this package are vulnerable to Missing Authorization via the emoji and sticker upload actions, which drop the sender-scoped media policy before loading a local file. A sender permitted to invoke those actions ca...
CVE-2026-100526
OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...
CVE-2026-100526 Vulnerability in discord
OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...
EUVD-2026-87524
OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...
CVE-2026-100526
The @openclaw/discord npm package (OpenClaw's Discord integration) before version 2026.9.3 contains a vulnerability where it may fail to enforce sender-scoped media policies during emoji and sticker upload actions. An attacker permitted to invoke these actions could cause the application to read ...
CVE-2026-100526 Vulnerability in discord
OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...
CVE-2026-100526 Vulnerability in discord
OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...
CVE-2026-100526
OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...
CVE-2026-100526: Missing Authorization
OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...
Malicious code in draft-js-sticker-plugin-vixlet (npm)
The package draft-js-sticker-plugin-vixlet was found to contain malicious code. --- Credit: OpenSSF source...
EUVD-2020-12716
Malware in sbrugna...
EUVD-2021-18225
Malware in sbrugna...
EUVD-2021-18231
Malware in sbrugna...
EUVD-2021-18232
Malware in sbrugna...
EUVD-2025-10087
Malicious code in bioql PyPI...
