66 matches found
guac
GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...
CVE-2026-101065
The Obot open-source AI agent/MCP platform is vulnerable in all versions up to and including commit d7e6970 . The issue stems from the Docker quickstart command in the README, which initializes the container listening on 0.0.0.0:8080 with authentication disabled by default. Under these conditions...
CVE-2026-101065 Obot Quickstart Docker Deployment Unauthenticated Admin Access
Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...
PT-2026-99711
Name of the Vulnerable Software and Affected Versions Obot versions up to and including commit d7e6970 Description The Docker quickstart command starts the container listening on 0.0.0.0:8080 with authentication disabled by default. In this state, every request is mapped to a synthetic "nobody"...
PoCLab
kernel-poc Minimal Linux kernel + QEMU environment for reprod...
EUVD-2016-7940
Malware in sbrugna...
EUVD-2016-6356
Malware in sbrugna...
EUVD-2016-7267
Malware in sbrugna...
EUVD-2016-7249
Malware in sbrugna...
MAL-2025-27700 Malicious code in nodus-quickstart (npm)
The package nodus-quickstart was found to contain malicious code...
Malicious code in payments-quickstart (npm)
The package payments-quickstart was found to contain malicious code...
Malicious code in quickstart-mobile-server (npm)
The package quickstart-mobile-server was found to contain malicious code...
MAL-2025-28945 Malicious code in payments-quickstart (npm)
The package payments-quickstart was found to contain malicious code...
Malicious code in nodus-quickstart (npm)
The package nodus-quickstart was found to contain malicious code...
Malicious code in voice-quickstart-server-node (npm)
The package voice-quickstart-server-node was found to contain malicious code...
MAL-2025-38546 Malicious code in voice-quickstart-server-node (npm)
The package voice-quickstart-server-node was found to contain malicious code...
MAL-2025-31304 Malicious code in quickstart-mobile-server (npm)
The package quickstart-mobile-server was found to contain malicious code...
Malicious code in pinterest-api-quickstart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de6afa61b510fce124f3acc43d8e5400a0bf0566b85284bf19cf7fdea19934c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...