PT-2026-57165

The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot endpoint accepts POST requests authenticated solely by a session cookie that lacks the SameSite attribute. A remote attacker can host a malicious web page that, when visited by an...

satellitectf

CONSTELLATION PIVOT CTF A Satellite Cyber-Physical CTF Chal...

Newtec Satellite Modem MDM6000 2.2.5 Cross Site Scripting

Newtec Satellite Modem MDM6000 2.2.5 Cross-Site Scripting Vulnerability Vendor: Newtec Cy N.V. Product web page: http://www.newtec.eu Affected version: 2.2.5.67852 2.2.4.64193 1.3.8.56435 Summary: The MDM6000 modem is typically installed at both ends of a point-to-point satellite link or at the...