Base de CVEs

CVE-2026-25253 Alta · 8.8 CWE-669 01/02/2026

Incorrect Resource Transfer Between Spheres em Openclaw

OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.

CVE-2025-67895 Crítica · 9.8 CWE-669 17/12/2025

Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2

Edge3 Worker RPC RCE on Airflow 2. This issue affects Apache Airflow Providers Edge3: before 2.0.0 - and only if you installed and configured it on Airflow 2. The Edge3 provider support in Airflow 2 has been always development-only and not officially released, however if you installed and configured Edge3 provider in Airflow 2, it implicitly enabled non-public (normally) API which was used to test Edge Provider in Airflow 2 during the development. This API allowed Dag author to perform Remote Code Execution in the webserver context, which Dag Author was not supposed to be able to do. If you installed and configured Edge3 provider for Airflow 2, you should uninstall it and migrate to Airflow 3. The new Edge3 provider versions (>=2.0.0) has minimum version of Airflow set to 3 and the RCE-prone Airflow 2 code is removed, so it should no longer be possible to use the Edge3 provider 2.0.0+ on Airflow 2. If you used Edge Provider in Airflow 3, you are not affected.

CVE-2025-62775 Alta · 8.0 CWE-669 22/10/2025

Incorrect Resource Transfer Between Spheres em Mercku M6a

Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.

CVE-2025-62646 Alta · 7.7 CWE-669 17/10/2025

Incorrect Resource Transfer Between Spheres em Rbi Restaurant Brands International Assistant

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to review the stored audio of conversations between associates and Drive Thru customers.

CVE-2024-31573 Média · 4.0 CWE-669 17/10/2025

Incorrect Resource Transfer Between Spheres em XMLUnit XMLUnit for Java

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.

CVE-2025-62292 Média · 4.3 CWE-669 10/10/2025

Incorrect Resource Transfer Between Spheres em SonarSource SonarQube

In SonarQube before 25.6, 2025.3 Commercial, and 2025.1.3 LTA, authenticated low-privileged users can query the /api/v2/users-management/users endpoint and obtain user fields intended for administrators only, including the email addresses of other accounts.

CVE-2025-59692 Baixa · 3.7 CWE-669 18/09/2025

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the...

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT policies when connecting to a VPN server. This removes firewall rules that may have been configured manually or by other software (e.g., UFW, container engines, or system security policies). Upon VPN disconnect, the original firewall state is not restored. As a result, the system may become unintentionally exposed to network traffic that was previously blocked. This affects CLI 2.0.1 and GUI 2.10.0.

CVE-2025-59691 Baixa · 3.7 CWE-669 18/09/2025

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside...

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume. In the CLI client, the VPN auto-reconnects and claims to be connected, but IPv6 traffic is no longer routed or blocked. In the GUI client, the IPv6 connection remains functional after disconnection until the user clicks Reconnect. In both cases, the real IPv6 address is exposed to external services, violating user privacy and defeating the advertised IPv6 leak protection. This affects CLI 2.0.1 and GUI 2.10.0.

CVE-2021-22900 Alta · 7.2 KEV Alta · 55 CWE-669 27/05/2021

Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.