OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.28 contained security vulnerabilities. These vulnerabilities stemmed from the failure to disconnect active WebSocket sessions when removing devices or tokens, allowing attackers...

GHSA-9P93-7J67-5PC2 OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding

Summary Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding. Details The HTTP route previously treated any bearer-authenticated request as admin-eligible and could call without binding the action to requester ownership or caller-granted operator scopes. Th...

EUVD-2024-16228

Malicious code in bioql PyPI...

EUVD-2025-26246

Malicious code in bioql PyPI...

CVE-2021-25777

In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly...

UBUNTU-CVE-2022-39290

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions authenticated users can bypass CSRF keys by modifying the request supplied to the Zoneminder web application. These modifications include replacing HTTP POST with an HTTP GET and removing the CS...

SUSE-SU-2022:1149-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Mozilla NSS 3.68.3 bsc1197903: - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS11 tokens are removed while in use...

SUSE-SU-2022:14936-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Mozilla NSS 3.68.3 bsc1197903: - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS11 tokens are removed while in use...

fribidi 代码问题漏洞

fribidi is an open source implementation of a bi-directional Unicode algorithm. A code issue vulnerability exists in fribidi that stems from a crash caused by incorrectly handling null input when removing tokens from a unicode string. An attacker exploiting this vulnerability could cause FriBidi ...

Owner can lock any of basket tokens

Handle Czar102 Vulnerability details Impact Owner can remove any tokens, and since lock all funds that the contract has in a specific token. The owner may engineer the deletion in such way that afraid people will fear next locks and quit the basket, then the owner may add the token back, gaining...

CVE-2021-25777

In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly...

CVE-2021-25777

In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly...

Design/Logic Flaw

In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly...

CVE-2021-25777

In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly...

CVE-2021-25777

In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly...

CVE-2021-25777: Incorrect Authorization

In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly...

PT-2021-16789

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2020.2.1 Description The issue is related to improper permission checks during token removal. Recommendations For versions prior to 2020.2.1, update to version 2020.2.1 or later to resolve the issue...