Greenhat Announces Successful Delegation at Web Summit Vancouver 2026

Vancouver, Canada, 14th July 2026, CyberNewswire...

CVE-2026-13699 Databroker 0.6.1 PublishValue missing data_point panic

In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional datapoint field in PublishValueRequest. When a request contains a valid signalid but omits datapoint, the server directly calls unwrap on request.datapoint,...

CVE-2026-13699 Databroker 0.6.1 PublishValue missing data_point panic

In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional datapoint field in PublishValueRequest. When a request contains a valid signalid but omits datapoint, the server directly calls unwrap on request.datapoint,...

MAL-2026-10575 Malicious code in web-pop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40594f220414cf22d0879782f17f921f8c6fd17d054b70dd1a0c2b3851c0080a web-pop is a typosquat of pino copied description and keywords. On module load, lib/initializeCaller.js runs a top-level IIFE that reconstructs a...

CVE-2026-15668

A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute of the file internal/agent/tools/web.go of the component web Tool. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotel...

CVE-2026-15668 louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery

A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute of the file internal/agent/tools/web.go of the component web Tool. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotel...

CVE-2026-15668

A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute of the file internal/agent/tools/web.go of the component web Tool. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotel...

CVE-2026-15668 louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery

A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute of the file internal/agent/tools/web.go of the component web Tool. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotel...

CVE-2026-15668 louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery

A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute of the file internal/agent/tools/web.go of the component web Tool. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotel...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the webfetch function in the IPv4 Handler component when processing the url argument. An attacker can access internal resources, exfiltrate sensitive data, or perform unauthorized actions by supplyin...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the webfetch function in the IPv4 Handler component when processing the url argument. An attacker can access internal resources, exfiltrate sensitive data, or perform unauthorized actions by supplyin...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the tools.webFetch function. An attacker can make unauthorized requests to internal or external resources by supplying crafted input to the affected process. Remediation There is no fixed version for...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the tools.webFetch function. An attacker can make unauthorized requests to internal or external resources by supplying crafted input to the affected process. Remediation There is no fixed version for...

Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware

CVE-2017-7921 — Hikvision IP Camera / DVR / NVR Improper Au...

CVE-2026-44768

creationtimestamp| type| source ---|---|--- 2026-07-14 01:40:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql37ztbex2l...

CVE-2026-44760

Due to a Cross-Site Scripting XSS vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into the HTTP response which allows an attacker to inject and execute arbitrary JavaScript code under certain conditions...

CVE-2026-15620

A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of the file tools/toolwebfetch.go. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be...

CVE-2026-53694

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3284 2026-07-15 00:00:35+00:00| seen| https://t.me/bdufstecru/3284 2026-07-16 19:00:24+00:00| seen| Telegram/cWrr6fLMVkesc0a1CZjUiE2dAgXKJvGPc9k8JGOqheTq7M 2026-07-17 00:00:41+00:00| seen|...

CVE-2026-44747

creationtimestamp| type| source ---|---|--- 2026-07-14 00:54:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkymgc6gn2r 2026-07-14 02:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql5t5mr6v2x 2026-07-14 03:00:30+00:00| seen|...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the web search process. An attacker can gain unauthorized access to restricted operations by exploiting misconfigured input paths. Remediation Upgrade openclaw...