Katriel Moses

Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb

WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows

Nango < 0.71.6 Missing Authentication RCE via runner tRPC server

Ground Station prior to 0.6.0 Unauthenticated Database Wipe and Arbitrary Data Injection via Socket.IO database_backup full_restore Action

Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO

OpenChamber 1.11.7 Unauthenticated DoS via /api/system/shutdown

OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter