86946 matches found
GHSA-F27W-VCWJ-C954
creationtimestamp| type| source ---|---|--- 2026-03-30 15:22:38+00:00| seen| Telegram/rgowYjXIbIqHAY83QR77NdcMiEs7Q8IlbaGHk6-omsHWj8...
Malicious code in hiveos-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6d040e58dddde324da836a19a41eb5c65698ef869ed3e534f662136f1fb48440 Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...
MAL-2026-2298 Malicious code in hiveos-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6d040e58dddde324da836a19a41eb5c65698ef869ed3e534f662136f1fb48440 Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...
GHSA-XHPV-HC6G-R9C6
creationtimestamp| type| source ---|---|--- 2026-03-30 10:01:09+00:00| seen| Telegram/oIt8DGorr8cyCUyQDoJ69KF18sDdBCT7fq8G95rr4FMqvI...
GHSA-9CX6-37PM-9JFF
creationtimestamp| type| source ---|---|--- 2026-03-30 10:01:09+00:00| seen| Telegram/oIt8DGorr8cyCUyQDoJ69KF18sDdBCT7fq8G95rr4FMqvI...
CVE-2026-20999
creationtimestamp| type| source ---|---|--- 2026-03-30 09:00:04+00:00| seen| https://t.me/GithubRedTeam/77928 2026-03-30 15:00:06+00:00| published-proof-of-concept| Telegram/pEvDlFgEJuiOJi0pdpDLW7XAzWWPVWvDgc6lfDEOZmEhu0...
CVE-2026-34598
creationtimestamp| type| source ---|---|--- 2026-03-29 19:27:45+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-37fq-47qj-6j5j 2026-04-02 19:27:20+00:00| published-proof-of-concept| Telegram/zJs9VhJAI5JOvrL4hzeWnrOleMDgHArbbwhOuzjaL80cudA...
Malicious code in hiveos (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 632c5c53f72df87d7b0d9843df212e147e729699ffe5e7f6c20e3cd41fa13f64 Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...
MAL-2026-2294 Malicious code in hiveos (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 632c5c53f72df87d7b0d9843df212e147e729699ffe5e7f6c20e3cd41fa13f64 Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...
OpenClaw: Telegram DM-Scoped Inline Button Callbacks Bypass DM Pairing and Mutate Session State
Summary Telegram DM-Scoped Inline Button Callbacks Bypass DM Pairing and Mutate Session State Affected Packages / Versions - Package: openclaw - Affected versions: = 2026.3.24 - First patched version: 2026.3.25 - Latest published npm version at verification time: 2026.3.24 Details Telegram callba...
GHSA-J4C9-W69R-CW33 OpenClaw: Telegram DM-Scoped Inline Button Callbacks Bypass DM Pairing and Mutate Session State
Summary Telegram DM-Scoped Inline Button Callbacks Bypass DM Pairing and Mutate Session State Affected Packages / Versions - Package: openclaw - Affected versions: = 2026.3.24 - First patched version: 2026.3.25 - Latest published npm version at verification time: 2026.3.24 Details Telegram callba...
EUVD-2026-17020
OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...
GHSA-C447-W54G-F55J Duplicate Advisory: OpenClaw Telegram webhook request bodies were read before secret validation, enabling unauthenticated resource exhaustion
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jq3f-vjww-8rq7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the...
Duplicate Advisory: OpenClaw Telegram webhook request bodies were read before secret validation, enabling unauthenticated resource exhaustion
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jq3f-vjww-8rq7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the...
GHSA-XF99-J42Q-5W5P
creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:32+00:00| seen| Telegram/JZ1l27ygigxS-8YXSWLEZI05cz4uxozp1fQc7J9Y59z0mpU...
GHSA-63F5-HHC7-CX6P
creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:32+00:00| seen| Telegram/JZ1l27ygigxS-8YXSWLEZI05cz4uxozp1fQc7J9Y59z0mpU...
GHSA-JQ3F-VJWW-8RQ7
creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:32+00:00| seen| Telegram/JZ1l27ygigxS-8YXSWLEZI05cz4uxozp1fQc7J9Y59z0mpU...
GHSA-VR7J-G7JV-H5MP
creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:32+00:00| seen| Telegram/JZ1l27ygigxS-8YXSWLEZI05cz4uxozp1fQc7J9Y59z0mpU...