Aggregator

CVE-2026-41374 | OpenClaw up to 2026.3.30 Discord Audio Preflight Transcription amplification (GHSA-hhff-fj5f-qg48)

VulDB Recent Entries
2 weeks 4 days ago
A vulnerability, which was classified as problematic, was found in OpenClaw up to 2026.3.30. Affected by this issue is some unknown functionality of the component Discord Audio Preflight Transcription. Executing a manipulation can lead to incorrect behavior order: early amplification. This vulnerability appears as CVE-2026-41374. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.
vuldb.com

MNT6

Dark Feed IO
2 weeks 4 days ago

You must login to view this content

cohenido

MNT6

Dark Feed IO
2 weeks 4 days ago

You must login to view this content

cohenido

CVE-2025-41658

CVE Trends
2 weeks 4 days ago
Currently trending CVE - Hype Score: 7 - CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.

CVE-2025-41659

CVE Trends
2 weeks 4 days ago
Currently trending CVE - Hype Score: 7 - A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain available, only ...

CVE-2024-7399

CVE Trends
2 weeks 4 days ago
Currently trending CVE - Hype Score: 8 - Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.

CVE-2026-5794 | Ercom Cryptobox up to 4.37.x/4.40.175 multiple resources with duplicate identifier

VulDB Recent Entries
2 weeks 4 days ago
A vulnerability classified as problematic was found in Ercom Cryptobox up to 4.37.x/4.40.175. Affected is an unknown function. Such manipulation leads to use of multiple resources with duplicate identifier. This vulnerability is documented as CVE-2026-5794. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-6238 | GNU C Library up to 2.33 DNS Response ns_printrrf/ns_printrr/fp_nquery buffer over-read

VulDB Recent Entries
2 weeks 4 days ago
A vulnerability classified as problematic has been found in GNU C Library up to 2.33. This impacts the function ns_printrrf/ns_printrr/fp_nquery of the component DNS Response Handler. This manipulation causes buffer over-read. This vulnerability is registered as CVE-2026-6238. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

The Hackers News
2 weeks 4 days ago
Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub Enterprise Server that could allow an authenticated user to obtain remote code execution with a single "git push" command. The flaw, tracked as CVE-2026-3854 (CVSS score: 8.7), is a case of command injection that could allow an attacker with push access to a repository to achieve
The Hacker News

Managed ad