CVE-2026-101050

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2024-0195

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0195 Run bellow command to check CVE-2024-0195 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2026-101050 Heym before 0.0.53 Authentication Bypass via Telegram Webhook

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2026-101050 Heym before 0.0.53 Authentication Bypass via Telegram Webhook

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2026-101050

Heym versions prior to 0.0.53 are vulnerable to an authentication bypass via Telegram webhook endpoints. The root cause is a failure to verify the X-Telegram-Bot-Api-Secret-Token header when the credential_id is absent or the secret_token is empty. This allows remote unauthenticated attackers to ...

EUVD-2026-87970

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2026-101050 Heym before 0.0.53 Authentication Bypass via Telegram Webhook

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2023-24044

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes hacer esto, realmente no deberías estar usando esto Instalar mediante pip pip install CVE-2023-24044 Ejecuta el siguiente comando para verificar CVE-2023-24044 -h Configuraciones 2. Nos integramos con la A...

CVE-2022-21371

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21371 Run bellow command to check CVE-2022-21371 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2020-3452

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esta herramienta Instalar via pip pip install CVE-2020-3452 Ejecuta el siguiente comando para verificar CVE-2020-3452 -h Configuraciones 2. Nos integramos...

CVE-2015-1635

Insignias Licencia MIT Instalación 1. Instale Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esto Instalar vía pip pip install CVE-2015-1635 Ejecute el siguiente comando para verificar CVE-2015-1635 -h Configuraciones 2. Integramos con la API de...

CVE-2020-27838

Insignias Licencia MIT Instalación 1. Instale Python3 y pip Instrucciones aquí Si no puede entender esto, realmente no debería estar usando esto Instalar mediante pip pip install CVE-2020-27838 Ejecute el siguiente comando para verificar CVE-2020-27838 -h Configuraciones 2. Nos integramos con la...

ThreatIntelligenceDiscordBot

Threat Intelligence Discord Bot The vx-underground Threat Intelligence Discord Bot gets updates from various clearnet domains, ransomware threat actor domains, and Telegram channels. This bot will check for updates in intervals of 1800 seconds omit Telegram bot, this is gotten in real time. Don't...

CVE-2021-24917

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes hacer esto, realmente no deberías estar usando esta herramienta Instalación mediante pip pip install CVE-2021-24917 Ejecuta el siguiente comando para verificar CVE-2021-24917 -h Configuraciones 2. Nos...

CVE-2000-0114

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes hacer esto, realmente no deberías estar usando esto Instalar mediante pip pip install CVE-2000-0114 Ejecuta el siguiente comando para verificar CVE-2000-0114 -h Configuraciones 2. Nos integramos con la API...

CVE-2026-101050: Improper Authentication

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2026-100536

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause...

CVE-2026-100536 OpenClaw before 2026.8.1 Path Traversal via Structured Attachments

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause...

CVE-2026-100536

Versions of OpenClaw prior to 2026.8.1 are vulnerable to a path traversal flaw within structured message attachments . The root cause is a failure to validate all source fields, which allows attackers to provide multiple source fields to bypass sandbox path validation . This enables the delivery ...

CVE-2026-100536 OpenClaw before 2026.8.1 Path Traversal via Structured Attachments

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause...