sec_review_cve-2024-3094

Se realizó una revisión de seguridad completa de la vulnerabilidad de código abierto CVE-2024-3094. Basándose en los datos obtenidos, se prepararon: 1. Informe «ThreatModel + SecurityReview» – descripción detallada de las amenazas, rutas de explotación, evaluación de riesgos y recomendaciones par...

OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation

Impact Browser SSRF Policy Bypass via Interaction-Triggered Navigation. Browser interactions could trigger navigations that bypassed the normal SSRF navigation checks. OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a...

SUSE CVE-2025-29785

quic-go is an implementation of the QUIC protocol in Go. The loss recovery logic for path probe packets that was added in the v0.50.0 release can be used to trigger a nil-pointer dereference by a malicious QUIC client. In order to do so, the attacker first sends valid QUIC packets from different...