BytesnBites
IT Security
Obot versions up to 0.22.1 allow privileged users to set arbitrary MCP URLs, creating an SSRF that can reach internal services and… Obot versions up to 0.22.1 allow privileged users to set arbitrary MCP URLs, creating…
IT Security
Critical unauthenticated SQL injection in Metacat (CVE‑2026‑48528) lets attackers steal or alter research data. Upgrade to 3.4.1 or disable the /cn API… Critical unauthenticated SQL injection in Metacat (CVE‑2026‑48528) lets attackers steal or alter research data.…
IT Security
GeoLens < 1.2.3 suffers an authorization bypass that lets attackers harvest private map layers, raster data, and dataset metadata. Upgrade to 1.2.3… GeoLens < 1.2.3 suffers an authorization bypass that lets attackers harvest private map layers,…