Depthfirstdisclosures

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.1.29 **Description** OpenClaw (also known as ClawdBot or MoltBot) contains a critical security flaw due to the lack of proper validation of incoming requests. The software obtains a `gatewayUrl` value from a query string and automatically establishes a WebSocket connection without user prompting, which transmits a token value. This flaw allows a remote attacker to gain unauthorized system access and execute arbitrary code if a user visits a specially crafted link. This issue is characterized as a WebSocket token hijacking vulnerability. **Recommendations** Update OpenClaw to version 2026.1.29 or later.

**Name of the Vulnerable Software and Affected Versions** Sandboxie versions 1.16.6 and below **Description** Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. The SYSTEM-level service `SbieSvc.exe` exposes the `SbieIniServer::RC4Crypt` function to sandboxed processes. This function adds a fixed header size to a caller-controlled `value len` without performing adequate overflow checks. Providing a large `value len` (for example, 0xFFFFFFF0) causes the allocation size to wrap around, resulting in a heap overflow when attacker-controlled data is copied into a buffer that is too small. Successful exploitation allows sandboxed processes to execute arbitrary code with SYSTEM privileges, leading to full host compromise. **Recommendations** Update Sandboxie to version 1.16.7 or later.

**Name of the Vulnerable Software and Affected Versions** Swetrix Web Analytics API versions prior to 7d8b972 **Description** A directory traversal issue exists in Swetrix Web Analytics API 3.1.1 before commit 7d8b972. This allows a remote attacker to achieve Remote Code Execution via a crafted HTTP request. **Recommendations** Update Swetrix Web Analytics API to version 7d8b972 or later.