Katriel Moses

Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint

Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb

Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

Nango < 0.71.6 Missing Authentication RCE via runner tRPC server

Ground Station prior to 0.6.0 Unauthenticated Database Wipe and Arbitrary Data Injection via Socket.IO database_backup full_restore Action

Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO

OpenChamber 1.11.7 Unauthenticated DoS via /api/system/shutdown