Katriel Moses

Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows

Insecure PRNG and Information Exposure in urwid Web Display Backend

kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py

Nango < 0.71.6 Missing Authentication RCE via runner tRPC server

ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb

tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

Ground Station prior to 0.6.0 Unauthenticated Database Wipe and Arbitrary Data Injection via Socket.IO database_backup full_restore Action

Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

OpenChamber 1.11.7 Unauthenticated DoS via /api/system/shutdown