The vulnerability of the OpenEMR system for managing medical documents, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary codes.

The vulnerability of the OpenEMR system for medical documentation is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

The vulnerability of the cluster synchronization component in Wazuh Manager, a platform for security monitoring and threat detection, allows attackers to escalate their privileges.

The vulnerability of the cluster synchronization component in Wazuh Manager, a platform for security monitoring and threat detection, is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to increase their privileges...

The vulnerability of the generate_keypair() function in the application programming interface of the Wazuh security monitoring and threat detection platform allows a malicious actor to cause a service failure.

The vulnerability of the generatekeypair function in the application programming interface of the Wazuh security monitoring and threat detection platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the FreeScout support service management system lies in the failure to remove script-related HTML tags from web pages, allowing attackers to carry out XSS attacks.

The vulnerability of the FreeScout support service management system lies in the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...

The vulnerability of the OpenEMR system for medical documentation, related to insufficient validation of requests on the server side, allows a hacker to perform a SRF attack.

The vulnerability of the OpenEMR system for medical documentation is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to execute a SRF attack remotely...

The vulnerability of the portal_login_username() function in the OpenEMR medical documentation system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the portalloginusername function in the OpenEMR medical documentation system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the OpenEMR system for managing medical documents, related to improper behavior, allows a violator to escalate their privileges.

The vulnerability of the OpenEMR system for medical documentation is related to improper behavior patterns. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the allowlist mode of the AI agent OpenClaw (formerly ClawdBot or MoltBot) allows a violator to execute arbitrary commands.

The vulnerability of the allowlist mode for the AI agent OpenClaw previously – ClawdBot or MoltBot is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to cause memory corruption.

The vulnerability of embedded software developed by Qualcomm relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause damage to the memory...

The vulnerability of the Transport Layer Security library GnuTLS, related to its algorithmic complexity, allows attackers to induce a service failure.

The vulnerability of the Transport Layer Security library GnuTLS is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) relates to the implementation or modification of arguments, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the exploitation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the stripBotMention() function in the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to trigger a service denial.

The vulnerability of the stripBotMention function in the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the web panel 3x-ui, related to the lack of protection for the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the 3x-ui web panel is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript code...

The vulnerability of the WebAudio component in the Google Chrome browser on Mac operating systems allows a hacker to disclose protected information.

The vulnerability of the WebAudio component in the Google Chrome browser for Mac operating systems involves reading data beyond the buffer limit in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information by sending a specially crafted HTML page...

The vulnerability in the extensions/lobster/src/lobster-tool.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary commands.

The vulnerability in the extensions/lobster/src/lobster-tool.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) is related to the use of an incomplete black list, allowing the intruder to execute arbitrary commands.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of embedded Qualcomm microprogramming software, related to buffer overflows in dynamic memory, allows attackers to cause memory corruption.

The vulnerability of embedded Qualcomm software is related to the overflow of buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to cause memory corruption...

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside of the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of embedded Qualcomm software is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the SandboxJS library lies in the uncontrolled modification of prototype attributes of objects, allowing attackers to execute arbitrary code.

The vulnerability of the SandboxJS library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) involves unlimited distribution of resources, allowing a hacker to cause a service failure.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the HMAC algorithm (Hash-based Message Authentication Code) of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a perpetrator to compromise the integrity and accessibility of the protected information.

The vulnerability of the HMAC-based Message Authentication Code algorithm used by the AI agent OpenClaw formerly known as ClawdBot or MoltBot relates to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the integrity...

The vulnerability of the BlueBubbles plugin for the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a hacker to bypass existing security mechanisms.

The vulnerability of the BlueBubbles plugin for the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from an incorrect restriction on the path name to the restricted-access catalog, allowing attackers to read arbitrary files.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files...

The vulnerability of the parse_header() function in the GLib library allows a hacker to cause a service failure.

The vulnerability of the parseheader function in the GLib library is related to the violation of the buffer’s initial boundary. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the g_unichar_to_utf8() function in the GLib library allows a attacker to cause a service failure.

The vulnerability of the gunichartoutf8 function in the GLib library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of Google Chrome’s PWA components allows attackers to install arbitrary PWA applications.

The vulnerability of Google Chrome’s PWA components is related to access control errors. Exploiting this vulnerability allows a remote attacker to install arbitrary PWA applications...

The vulnerability of the Google Chrome browser’s PDF component, which allows a hacker to circumvent existing security restrictions

The vulnerability of the Google Chrome browser’s PDF component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions by sending a specially crafted HTML page...

The vulnerability in the `src/node-host/invoke-system-run-plan.ts` script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary code.

The vulnerability in the src/node-host/invoke-system-run-plan.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the implementation or modification of arguments. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

The vulnerability of the nlattr_to_sctp() function in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nlattrtosctp function in Linux operating systems is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the bytestring_parse() and string_parse() functions within the GLib library allows a hacker to cause a service failure.

The vulnerability of the bytestringparse and stringparse functions in the GLib library set is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the software platform for automating work processes in Kubernetes Argo Events, related to incorrect privilege assignment, allows a perpetrator to escalate their privileges.

The vulnerability of the software platform for automating work processes in Kubernetes Argo Events is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the g_base64_encode_close() function within the GLib library allows a attacker to cause a service failure.

The vulnerability of the gbase64encodeclose function in the GLib library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the stageSandboxMedia() function in the AI agent OpenClaw (previously ClawdBot or MoltBot) allows a violator to write any files they want.

The vulnerability of the stageSandboxMedia function in the AI agent OpenClaw previously ClawdBot or MoltBot is related to an incorrect definition of symbolic references before accessing a file. Exploiting this vulnerability allows a hacker to write arbitrary files...

The vulnerability of the os.tmpdir() function in the /feishu/src/media.ts script of the AI agent OpenClaw (formerly ClawdBot or MoltBot) allows a violator to write any files they desire.

The vulnerability of the os.tmpdir function in the /feishu/src/media.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to an incorrect restriction on the path name of the temp directory. Exploiting this vulnerability allows a remote attacker to write arbitrary...

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of embedded software developed by Qualcomm relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to cause memory corruption.

The vulnerability of embedded software developed by Qualcomm relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause damage to the memory...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the Google Chrome browser’s user interface allows a perpetrator to gain unauthorized access to the rendering process and perform a substitution of the user interface.

The vulnerability of Google Chrome’s user interface is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to the rendering process and replace the user interface by sending a speciall...

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Media component is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTML page...

The vulnerability of Google Chrome’s WebCodecs interface allows attackers to disclose protected information.

The vulnerability of Google Chrome’s WebCodecs interface is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created HTML page...

The vulnerability of the Omnibox address bar in the Google Chrome browser on iOS operating systems allows a hacker to replace the user interface.

The vulnerability of the Omnibox address bar in the Google Chrome browser for iOS operating systems is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

The vulnerability of the setVpnPassCfg() function in the cstecgi.cgi script of the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the setVpnPassCfg function in the cstecgi.cgi script of the TOTOLINK A7100RU router’s software is related to the failure to eliminate special elements during the processing of the pptpPassThru parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the WebML component in the Google Chrome browser for Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the WebML component in the Google Chrome browser for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by sending a specially crafted HTML page...

The vulnerability in the implementation of IOCTL commands in Qualcomm’s embedded software allows a hacker to damage memory.

The vulnerability of the IOCTL command implementation in Qualcomm’s embedded software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause memory corruption...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) in Windows operating systems arises from the failure to take measures to neutralize special elements. This vulnerability allows a perpetrator to execute arbitrary commands.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot in Windows operating systems is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a hacker to execute arbitrary commands...

The vulnerability of the N8n automation platform, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the N8n automation platform for work processes is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the vvdec_push_data2() function in the HEIF File Parser component, a decoder and file format parser library, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the vvdecpushdata2 function in the HEIF File Parser component, a decoder and file format parser library, is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

The vulnerability of the OpenEMR system for managing medical documents, related to bypassing authentication using a user-controlled key, allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of the OpenEMR system for managing medical documents involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality of the protected information...

The vulnerability of the axios library, related to insufficient validation of requests on the server side when processing NO_PROXY rules, allows attackers to execute SSRF attacks.

The vulnerability of the axios library is related to insufficient validation of requests on the server side when processing NOPROXY rules. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from the failure to take measures to neutralize special elements, allowing the intruder to execute arbitrary commands.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...