Search Vulnerabilities

Privilege escalation via background service of OpenVPN Connect 3

iControl REST vulnerability

OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes

OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation

OpenClaw < 2026.3.25 - Privilege Escalation via Gateway Plugin HTTP Authentication Scope

OpenClaw < 2026.3.25 - Privilege Escalation via Backend Reconnect Scope Self-Claim

OpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSession

OpenClaw < 2026.3.22 - Privilege Escalation via device.pair.approve Scope Validation

OpenClaw < 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth Reconnect

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

Apache Airflow: Airflow externalLogUrl Permission Bypass

Improper Authorization in Nomysoft Informatics' Nomysem

A vulnerability has been identified in Spectrum Power 4 (All versions < V4

KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal

KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information

KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service

KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator

KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information

Privilege Escalation in Beamsec PhishPro