122354 matches found
CVE-2026-53983
The CVE concerns Ground Station prior to 0.6.0, exposing an unauthenticated blind SSRF via the orbital-source URL path. An unauthenticated Socket.IO client can connect on port 7000 (credentials not required, wildcard CORS) and submit a data_submission with submit-orbital-sources to store an attac...
CVE-2026-53983 Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outbound HTTP requests to attacker-chosen destinations...
CVE-2026-53983
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outbound HTTP requests to attacker-chosen destinations...
CVE-2026-53983 Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outbound HTTP requests to attacker-chosen destinations...
GHSA-3X6R-WXXG-53VV
creationtimestamp| type| source ---|---|--- 2026-08-06 15:31:19+00:00| seen| https://gist.github.com/alon710/164398037554120d630a453295ebf3cc...
CVE-2026-7726
creationtimestamp| type| source ---|---|--- 2026-08-06 15:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msgdharb2f2c...
CVE-2026-18427
creationtimestamp| type| source ---|---|--- 2026-08-06 14:59:17+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3msgckuh2w226 2026-08-06 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgtfyoa4h2n...
CVE-2026-12605
creationtimestamp| type| source ---|---|--- 2026-08-06 14:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgbm65koi2i 2026-08-11 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrn426pqz2u...
CVE-2026-5134
creationtimestamp| type| source ---|---|--- 2026-08-06 14:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgbm4uoar2l...
GHSA-8V25-V8P6-QF7V
creationtimestamp| type| source ---|---|--- 2026-08-06 14:32:29+00:00| seen| https://gist.github.com/alon710/24bef11b86322cc9770e86fa941513f4...
MAL-2026-13427 Malicious code in @leejungkiin/awkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aa6db17591fc0a27924ca615763ffd2a3eb92d0f517de9719ce74ef47ac4add The package ships scripts/dependency-manager.js which, when run as part of the install lifecycle, invokes execSync'curl -fsSL...
CVE-2026-5116
creationtimestamp| type| source ---|---|--- 2026-08-06 14:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msga3ycwr326...
CVE-2026-18973
creationtimestamp| type| source ---|---|--- 2026-08-06 14:00:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msg7cjkbv426 2026-08-06 14:01:32+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048924886717524...
CVE-2026-67434
creationtimestamp| type| source ---|---|--- 2026-08-06 14:00:28+00:00| seen| https://gist.github.com/FR-Flo/a87a156132d4ce3d4d952e21a796220a 2026-08-06 14:59:38+00:00| seen| https://gist.github.com/FR-Flo/ce0e6938e2c8aa7a093b16e80373dccf 2026-08-07 04:31:19+00:00| seen|...
Malicious code in @ccfly/setup-linux-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33138ee17148f975a7c0b34f5d6ee1a4ad082395b87872dc91de0778130b91c8 The tarball ships a single 6.9 MB linux/x64 Go executable at bin/ccfly-setup and no source. The binary links github.com/creack/pty PTY spawning and...
GHSA-8MXV-9XHP-86H4
creationtimestamp| type| source ---|---|--- 2026-08-06 13:32:14+00:00| seen| https://gist.github.com/alon710/719fff48bd5faded3e0e79faaf3782f6...
CVE-2026-19041 MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection
A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiat...
CVE-2026-66732
Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...
CVE-2026-0516
creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4ibyz3425 2026-09-06 20:13:03+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3muuskhrap22n...