87127 matches found
CVE-2026-32980 OpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Request
OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...
CVE-2026-32980 OpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Request
OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...
CVE-2026-32980
OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies prior to validating the x-telegram-bot-api-secret-token header, enabling unauthenticated attackers to exhaust server resources. Attack vectors involve POST requests to the webhook endpoint that can trigger memory consumpt...
CVE-2026-0897
creationtimestamp| type| source ---|---|--- 2026-03-29 09:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77758 2026-03-29 15:00:08+00:00| published-proof-of-concept| Telegram/Fln1CDV-IIlp7EGS7hrJibbBYDcdeDsNTgWenTzMncUGCI 2026-04-29 19:58:54+00:00| published-proof-of-concept|...
PT-2026-28459
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.13 Description The software reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header. This allows unauthenticated attackers to exhaust server resources by...
CVE-2026-5012
creationtimestamp| type| source ---|---|--- 2026-03-28 21:15:07+00:00| published-proof-of-concept| Telegram/LZQQzzPWCJ0u-JtpMXX8dPawptspNwaEbHgF42UWSXAmWi4...
Malicious code in python-aiogram-telegram-updater (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 94b286136c318836563c0eaddf44e8d1b21f217086b444a3266d91b69ace79b8 When run, the package exfiltrates files from a cryptowallet and modifies its executable placing an implant exfiltrating passphrase later. --- Category: MALICIO...
CVE-2026-1657
creationtimestamp| type| source ---|---|--- 2026-03-28 11:00:13+00:00| published-proof-of-concept| Telegram/Bld85CtsFdp3cp4CuQXejDT2NnO5wnL0D5orUaEDvpJZYg 2026-03-28 15:00:08+00:00| published-proof-of-concept| Telegram/GuUAgvBxTogRGX6aza49DLviAS85NOtuNVZsHJCRFh-BHeo 2026-04-09 18:00:04+00:00|...
CVE-2026-33028
creationtimestamp| type| source ---|---|--- 2026-03-28 03:20:16+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-m468-xcm6-fxg4 2026-03-30 19:17:51+00:00| published-proof-of-concept| Telegram/fjirMqbI7HbDe3OLZhJWgKP9iQtg8z94oAYRFGU8rTUaV0...
GHSA-QX3G-5G22-FQ5W
creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...
GHSA-74XM-6WGF-X37J
creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...
GHSA-M74M-F7CR-432X
creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...
GHSA-3P2M-H2V6-G9MX
creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:45+00:00| published-proof-of-concept| Telegram/Y8kzkrSdzd2cmfNdKzxY7235NQsCILSeJh1PyUoA-eHkPkg...
GHSA-W4GP-FJGQ-3Q4G
creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:45+00:00| published-proof-of-concept| Telegram/Y8kzkrSdzd2cmfNdKzxY7235NQsCILSeJh1PyUoA-eHkPkg...
GHSA-45G3-CV93-Q59V
creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...
GHSA-3843-RR4G-M8JQ
creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...
GHSA-58R7-4WR5-HFX8
creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...
GHSA-F42F-PHVP-43X5
creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...