86947 matches found
GHSA-QC36-X95H-7J53
creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:09+00:00| seen| Telegram/bOji7uFGKpjQ-Vv3CFZvWqxNHLg4F03MY6E5pxai3iB8W0...
GHSA-4JPW-HJ22-2XMC
creationtimestamp| type| source ---|---|--- 2026-03-29 15:19:56+00:00| published-proof-of-concept| Telegram/cXzVIGK7PQfwtmMwRkRYvJTJsFs-s6Ys2jSidGnYSoPd-U...
GHSA-4W7M-58CG-CMFF
creationtimestamp| type| source ---|---|--- 2026-03-29 15:19:56+00:00| published-proof-of-concept| Telegram/cXzVIGK7PQfwtmMwRkRYvJTJsFs-s6Ys2jSidGnYSoPd-U...
CVE-2026-33533
creationtimestamp| type| source ---|---|--- 2026-03-29 15:05:01+00:00| published-proof-of-concept| https://github.com/nicolargo/glances/security/advisories/GHSA-7p93-6934-f4q7 2026-04-02 17:37:18+00:00| seen| Telegram/asfs2UkHDA2dEAWxK7wNvn0OefGesF-RFz1ocNui3XpVnY...
CVE-2026-32980
OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...
CVE-2026-32980
OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...
CVE-2026-32980 OpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Request
OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...
CVE-2026-32980 OpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Request
OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...
CVE-2026-32980
OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies prior to validating the x-telegram-bot-api-secret-token header, enabling unauthenticated attackers to exhaust server resources. Attack vectors involve POST requests to the webhook endpoint that can trigger memory consumpt...
CVE-2026-0897
creationtimestamp| type| source ---|---|--- 2026-03-29 09:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77758 2026-03-29 15:00:08+00:00| published-proof-of-concept| Telegram/Fln1CDV-IIlp7EGS7hrJibbBYDcdeDsNTgWenTzMncUGCI 2026-04-29 19:58:54+00:00| published-proof-of-concept|...
PT-2026-28459
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.13 Description The software reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header. This allows unauthenticated attackers to exhaust server resources by...
CVE-2026-5012
creationtimestamp| type| source ---|---|--- 2026-03-28 21:15:07+00:00| published-proof-of-concept| Telegram/LZQQzzPWCJ0u-JtpMXX8dPawptspNwaEbHgF42UWSXAmWi4...
Malicious code in python-aiogram-telegram-updater (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 94b286136c318836563c0eaddf44e8d1b21f217086b444a3266d91b69ace79b8 When run, the package exfiltrates files from a cryptowallet and modifies its executable placing an implant exfiltrating passphrase later. --- Category: MALICIO...
CVE-2026-1657
creationtimestamp| type| source ---|---|--- 2026-03-28 11:00:13+00:00| published-proof-of-concept| Telegram/Bld85CtsFdp3cp4CuQXejDT2NnO5wnL0D5orUaEDvpJZYg 2026-03-28 15:00:08+00:00| published-proof-of-concept| Telegram/GuUAgvBxTogRGX6aza49DLviAS85NOtuNVZsHJCRFh-BHeo 2026-04-09 18:00:04+00:00|...
CVE-2026-33028
creationtimestamp| type| source ---|---|--- 2026-03-28 03:20:16+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-m468-xcm6-fxg4 2026-03-30 19:17:51+00:00| published-proof-of-concept| Telegram/fjirMqbI7HbDe3OLZhJWgKP9iQtg8z94oAYRFGU8rTUaV0...
GHSA-QX3G-5G22-FQ5W
creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...
GHSA-74XM-6WGF-X37J
creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...
GHSA-M74M-F7CR-432X
creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...