← All credits

Yuval Moravchick | JFrog

4 vulnerability records and advisories credit this contributor.

Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications

Bifrost unauthenticated remote code execution via MCP stdio client registration

Parallels Desktop local privilege escalation via appliance extract argument injection