|
GCVE-1337-2026-00000000000000011111111111111111111000000000000000000011111101001111111110000000000000000000011111111111111111111000000000000010100
|
|
EnergizeLab Eilik User-ID Mass Assignment Account Takeover
|
EnergizeLab
|
NestJS auth service
|
2026-10-15T20:43:47.669Z |
2026-10-15T20:43:47.669Z |
|
GCVE-1337-2026-00000000000000111111111111111111111000000000000000000011111100111111111111000000000000000000011111111111111101010000000000000010011
|
|
EnergizeLab Station Middleware Admin APIs Missing Role…
|
EnergizeLab
|
station-middleware
|
2026-10-15T20:43:38.761Z |
2026-10-15T20:43:38.761Z |
|
GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010
|
|
EnergizeLab Eilik Unauthenticated AI Model Administrat…
|
EnergizeLab
|
FastAPI AI inference server
|
2026-10-15T20:43:30.618Z |
2026-10-15T20:43:30.618Z |
|
GCVE-1337-2026-00000000000000110111111111111111110000000000000000000011111100011111111110000000000000000000011111111111111000000000000000000010001
|
|
EnergizeLab Station Middleware Authenticated Path Trav…
|
EnergizeLab
|
station-middleware
|
2026-10-15T20:43:13.599Z |
2026-10-15T20:43:13.599Z |
|
GCVE-1337-2026-00000000000000000000111111111100000000000000000000000011111100001111111101000000000000000000011111111111111100000000000000000010000
|
|
EnergizeLab Firmware Updates Downloaded over HTTP With…
|
EnergizeLab
|
Robot firmware (mode 104000)
|
2026-10-15T20:43:04.229Z |
2026-10-15T20:43:04.229Z |
|
GCVE-1337-2026-00000000000000000001111111111100000000000000000000000011111111100111111111000000000000000000011111111111111100000000000000000001111
|
|
EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
|
EnergizeLab
|
FirmwareUpdater
|
2026-10-15T20:42:53.222Z |
2026-10-15T20:42:53.222Z |
|
GCVE-1337-2026-00000000000000000001111111111100000000000000000000000011111111001111111111000000000000000000010110111111111100000000000000000001110
|
|
EnergizeLab Eilik Unauthenticated Device-Token Issuanc…
|
EnergizeLab
|
NestJS auth service
|
2026-10-15T20:42:42.975Z |
2026-10-15T20:42:42.975Z |
|
GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101
|
|
EnergizeLab AI Station Default Root Credentials with S…
|
EnergizeLab
|
AI Station firmware (RK3562)
|
2026-10-15T20:42:34.038Z |
2026-10-15T20:42:34.038Z |
|
GCVE-1337-2026-00000000000000000000000000000000000000000000000001011111111110011111111110000000000000000000000000000000000000000000000000000001100
|
|
EnergizeLab Eilik AI Skill Upload Unauthenticated Path…
|
EnergizeLab
|
FastAPI AI inference server
|
2026-10-15T20:42:04.726Z |
2026-10-15T20:42:04.726Z |
|
GCVE-1337-2026-00000000000000000000000000000000000000000000000001011111111101111111111110000000000000000000000000000000000000000000000000000001011
|
|
Epic Games Unreal Engine Insecure Default URL Scheme A…
|
Epic Games
|
Unreal Engine
|
2026-10-14T02:31:08.607Z |
2026-10-14T02:31:08.607Z |
|
GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111101011111111110000000000000000000000000000000000000000000000000000001010
|
|
Anthropic Claude Desktop Cowork VM Image Contents Not …
|
Anthropic
|
Claude Desktop Cowork
|
2026-06-23T23:54:21.635Z |
2026-06-23T23:54:21.635Z |
|
GCVE-1337-2026-00000000000000000000000000000000000000000000000000111111111111111111111110000000000000000000000000000000000000000000000000000000111
|
|
Persistent undocumented backdoor access in Yarbo robot
|
Yarbo
|
Firmware
|
2026-05-07T16:09:26.134Z |
2026-05-08T22:46:29.192Z |
|
GCVE-1337-2026-00000000000000000000000000000000000000000000000000111111111100111111111110000000000000000000000000000000000000000000000000000001001
|
|
Open MQTT orchestration without read/write ACLs in Yar…
|
Yarbo
|
Firmware
|
2026-05-07T16:11:16.943Z |
2026-05-07T17:04:31.177Z |
|
GCVE-1337-2026-00000000000000000000000000000000000000000000000001111111111100011111111111000000000000000000000000000000000000000000000000000001000
|
|
Hardcoded credentials in Yarbo robot firmware
|
Yarbo
|
Firmware
|
2026-05-07T16:10:02.349Z |
2026-05-07T17:01:37.949Z |
|
GCVE-1337-2026-00000000000000000000000000000000000000000000000001011111111111000111111110000000000000000000000000000000000000000000000000000000110
|
|
NSA Ghidra Auto-Analysis Annotation Command Execution
|
NSA
|
Ghidra
|
2026-03-29T19:35:30.692Z |
2026-03-29T19:35:30.692Z |
|
GCVE-1337-2025-00000000000000000000000000000000000000000000000000111111111111111111111111000000000000000000000000000000000000000000000000000000011
|
|
HexStrike AI MCP Server Command Injection
|
0x4m4
|
HexStrike AI
|
2025-11-30T21:27:56.057Z |
2025-11-30T21:27:56.057Z |
|
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111111111011111111110000000000000000000000000000000000000000000000000000000100
|
|
Abilis CPX Fallback Shell Connection Relay
|
Abilis
|
CPX
|
2025-11-04T00:23:23.924Z |
2025-11-04T00:23:23.924Z |
|
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011011111110011111111110000000000000000000000000000000000000000000000000000000010
|
|
Unitree Multiple Robotic Products Command Injection
|
Unitree
|
Go2
|
2025-09-26T06:53:49.585Z |
2025-09-26T15:16:57.586Z |
|
GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001
|
|
Unauthenticated leak of sensitive information affectin…
|
Brother Industries, Ltd
|
HL-L8260CDN
|
2025-08-12T15:23:00.577Z |
2025-08-15T05:53:23.017Z |