Search Vulnerabilities

Certain NETGEAR devices allow administrators to tamper with system

Authenticated Remote Code Execution via File Overwrite

Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection

Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet

Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode

Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks

OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File

OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend

OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File

Cortex XDR Agent: Local Administrator can disable the agent on Windows

OpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization

Local privilege escalation due to improper handling of environment variables

Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53

Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53

OpenClaw < 2026.2.21 - Environment Variable Injection via Config env.vars

Dell PowerScale OneFS, versions 9

eBay API MCP Server Affected by Environment Variable Injection

Shopire <= 1.0.57 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install

Cursor has a Terminal Tool Allowlist Bypass via Environment Variables

Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)