BytesnBites

Tech Ops

IT Security

Critical OpenC3 COSMOS Stored XSS Vulnerability in BUTTON Widget – Security Advisory

A critical stored XSS vulnerability affects OpenC3 COSMOS telemetry screens via unsafe eval() in BUTTON widgets, enabling session hijacking and potential server‑side… A critical stored XSS vulnerability affects OpenC3 COSMOS telemetry screens via unsafe eval() in…

1 month ago

IT Security

CVE-2026-96455 Critical Unauthenticated RCE in Reachy Mini Daemon – Risks & Mitigations

CVE-2026-96455 exposes a critical unauthenticated RCE in the Reachy Mini daemon via the /apps/install endpoint, allowing LAN attackers to execute arbitrary code… CVE-2026-96455 exposes a critical unauthenticated RCE in the Reachy Mini daemon via the /apps/install…

1 month ago

IT Security

CVE-2026-57149: Critical Plone CMS Arbitrary Code Execution Vulnerability – Risks, Impact & Mitigation

CVE-2026-57149 is a critical arbitrary code execution flaw in Plone’s Classic portlet that lets any authenticated user run malicious code. The guide… CVE-2026-57149 is a critical arbitrary code execution flaw in Plone’s Classic portlet that lets…

1 month ago