88 matches found
guac
GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...
CVE-2026-101065 Obot Quickstart Docker Deployment Unauthenticated Admin Access
Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...
CVE-2026-101065
The Obot open-source AI agent/MCP platform is vulnerable in all versions up to and including commit d7e6970 . The issue stems from the Docker quickstart command in the README, which initializes the container listening on 0.0.0.0:8080 with authentication disabled by default. Under these conditions...
PT-2026-99711
Name of the Vulnerable Software and Affected Versions Obot versions up to and including commit d7e6970 Description The Docker quickstart command starts the container listening on 0.0.0.0:8080 with authentication disabled by default. In this state, every request is mapped to a synthetic "nobody"...
tripleo-quickstart (2.1.1) potentially affected by CVE-2025-14010 via ansible (2.5.7)
ansible PYPI version 2.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - tripleo-quickstart 2.1.1 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...
tripleo-quickstart (2.1.1) potentially affected by CVE-2023-5115 via ansible (2.5.7)
ansible PYPI version 2.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - tripleo-quickstart 2.1.1 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...
PoCLab
kernel-poc Minimal Linux kernel + QEMU environment for reprod...
com.okta.sdk:okta-sdk-coverage (>=21.0.0, <=24.0.0), com.okta.sdk:okta-sdk-examples-quickstart (>=21.0.0, <=24.0.0) +5 more potentially affected by CVE-2025-66033 via com.okta.sdk:okta-sdk-api (>=21.0.0, <=24.0.0)
com.okta.sdk:okta-sdk-api MAVEN version =21.0.0, =21.0.0, =21.0.0, =21.0.0, =21.0.0, =3.0.8, =3.0.8, =3.0.7, =3.0.8 Source cves: CVE-2025-66033 Source advisory: MEND:CVE-2025-66033...
com.okta.sdk:okta-sdk-coverage (>=21.0.0, <=24.0.0), com.okta.sdk:okta-sdk-examples-quickstart (>=21.0.0, <=24.0.0) +5 more potentially affected by CVE-2025-66033 via com.okta.sdk:okta-sdk-api (>=21.0.0, <=24.0.0)
com.okta.sdk:okta-sdk-api MAVEN version =21.0.0, =21.0.0, =21.0.0, =21.0.0, =21.0.0, =3.0.8, =3.0.8, =3.0.7, =3.0.8 Source cves: CVE-2025-66033 Source advisory: SNYK:JAVA-COMOKTASDK-14361681...
tripleo-quickstart (2.1.1) potentially affected by CVE-2025-14010 via ansible (2.5.7)
ansible PYPI version 2.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - tripleo-quickstart 2.1.1 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...
EUVD-2016-7267
Malware in sbrugna...
EUVD-2016-7249
Malware in sbrugna...
EUVD-2016-7940
Malware in sbrugna...
EUVD-2016-6356
Malware in sbrugna...
Malicious code in payments-quickstart (npm)
The package payments-quickstart was found to contain malicious code...
MAL-2025-31304 Malicious code in quickstart-mobile-server (npm)
The package quickstart-mobile-server was found to contain malicious code...
Malicious code in voice-quickstart-server-node (npm)
The package voice-quickstart-server-node was found to contain malicious code...
Malicious code in nodus-quickstart (npm)
The package nodus-quickstart was found to contain malicious code...