17492 matches found
CVE-2026-16200 zevorn rt-claw RPC swarm.c claw_tool_invoke authorization
A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function clawtoolinvoke of the file claw/services/swarm/swarm.c of the component RPC Handler. The manipulation leads to incorrect authorization. Remote exploitation of the attack is possible. The exploit has been...
CVE-2026-16200
The CVE-2026-16200 entry concerns zevorn rt-claw (up to 0.2.0). Affected component: the RPC Handler, specifically the function claw_tool_invoke in claw/services/swarm/swarm.c. Root cause: manipulation leads to incorrect authorization, enabling remote exploitation. Exploitation is possible over th...
CVE-2026-16199 nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization
A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This affects the function ExecTool.Execute of the file goclaw/internal/tools/credentialedexec.go. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been published...
CVE-2026-16199
CVE-2026-16199 affects the NextLevelBuilder GoClaw project, specifically the function ExecTool.Execute in goclaw/internal/tools/credentialed_exec.go, and is associated with versions up to 3.13.3-beta.3. The vulnerability arises from a flaw in ExecTool.Execute that can lead to improper authorizati...
PT-2026-61141
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where GCC's GCOV instrumentation may merge global branch counters with loop induction variables as an optimization. In the inflate fast function, the...
PT-2026-60999
Name of the Vulnerable Software and Affected Versions zevorn rt-claw versions prior to 0.2.1 Description An issue in the RPC Handler component allows for incorrect authorization. This occurs within the claw tool invoke function located in the claw/services/swarm/swarm.c file, which can be exploit...
PT-2026-61038
A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function tool run script execute of the file claw/services/tools/script.c of the component Telegram-to-AI Tool Execution Flow. Performing a manipulation results in code injection. It is possible to initiate the...
PT-2026-61059
A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10...
wp2shell
wp2shell-check Non-intrusive checker for CVE-2026-63030 /...
CVE-2026-16082
Summary of CVE-2026-16082 : Affects Sipeed PicoClaw up to version 0.2.9. The vulnerability is in the function ExecTool.executeRun (file: pkg/agent/pipeline_execute.go) where manipulation of the argument cwe leads to a time-of-check time-of-use issue. Exploitation is local, and a public exploit is...
CVE-2026-16077 AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following
A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function normalizerwpath of the file astrbot/core/tools/computertools/fs.py of the component Filesystem Computer-Use Tool. Performing a manipulation results in link following. The attack is only possible with local...
EUVD-2026-45356
A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function normalizerwpath of the file astrbot/core/tools/computertools/fs.py of the component Filesystem Computer-Use Tool. Performing a manipulation results in link following. The attack is only possible with local...
CVE-2026-16077
A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function normalizerwpath of the file astrbot/core/tools/computertools/fs.py of the component Filesystem Computer-Use Tool. Performing a manipulation results in link following. The attack is only possible with local...
[SECURITY] Fedora 43 Update: spoofdpi-1.5.3-2.fc43
Simple and fast anti-censorship tool written in Go...
[SECURITY] Fedora 43 Update: yq-4.53.3-1.fc43
Yq is a portable command-line YAML, JSON, XML, CSV, TOML, HCL and properties processor...
[SECURITY] Fedora 44 Update: spoofdpi-1.5.3-1.fc44
Simple and fast anti-censorship tool written in Go...
PT-2026-60979
A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate path of the file src/tools/builtin/path utils.rs of the component write file. The manipulation leads to link following. Local access is required to approach this attack. The exploit is...
Fedora 43 : yq (2026-990cdd8329)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-990cdd8329 advisory. Update to 4.53.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Linux Distros Unpatched Vulnerability : CVE-2026-46378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.10.1, the selector lexer matchRegexPatter...