zevorn rt-claw vulnerabilities

A security flaw in zevorn rt-claw up to version 0.2.0 affects the tool_run_script_execute function in claw/services/tools/script.c. Input manipulation allows remote code injection. The exploit has been publicly released and may be used in attacks.

A vulnerability was found in zevorn rt-claw up to version 0.2.0 in the functions claw_net_get and claw_net_post in the file claw/services/tools/net.c of the http_request component. Data manipulation leads to information disclosure. The attack can be executed remotely and the exploit has been made public.

A security flaw was discovered in zevorn rt-claw up to version 0.2.0, involving server-side request forgery (SSRF). The issue affects the receiver_thread function in the file claw/services/swarm/swarm.c within the http_request component. The attack can be performed remotely, and the exploit has been publicly released.

A vulnerability was found in zevorn rt-claw up to version 0.2.0 in the Swarm RPC Receiver component. The handle_rpc_request function in claw/services/swarm/swarm.c causes incorrect authorization, allowing remote exploitation. The exploit has been publicly disclosed and may be used.