-
Fool Me Once: A Space Security Story
We’ve been here before. A technology becomes critical infrastructure. The engineers building it are competent and focused on making it work. The organisations funding it have deadlines and KPIs that…
-
Nutcracking SquirrelMail: 19 Undocumented Vulnerabilities
SquirrelMail has been end-of-life since 2011. It’s still sitting in production behind corporate proxies, university mail portals and a surprising number of hosting panels. So one quiet afternoon I pulled…
-
CVE-2026-42568 LDAP Injection in YAMCS LdapAuthModule
Severity: Moderate CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Affected: yamcs-core < 5.12.7 and < 5.13.0 Fixed in: 5.12.7 / 5.13.0 Advisory: GHSA-cqh3-jg8p-336j Reporter: Daniel Miranda Barcelona (Excal1bur) Discovery date: 2026-04-20 Context If you’ve…
-
CVE-2026-54086 Uncontrolled Memory Allocation in ESA sleapi-j
Severity: Moderate CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected: sleapi-j < 5.1.7 Fixed in: sleapi-j 5.1.7 (commit 265118d) Advisory: GHSA-6g75-jwgj-hj8v Reporter: Daniel Miranda Barcelona (Excal1bur) Discovery date: 2026-03-26 This is the third YAMCS…
-
CVE-2026-44595 User enumeration in YAMCS
Severity: MEDIUM (CVSS 4.3)Affected: yamcs-core < 5.12.7Fixed in: yamcs-core 5.12.7Advisory: GHSA-p2rj-mrmc-9w29 YAMCS has an IAM system with privilege levels. One of them is SystemPrivilege.ControlAccess supposed to gate access to user…
-
CVE-2026-44596 No Rate Limiting in YAMCS
Severity: MEDIUM (CVSS 5.3)Affected: yamcs-core < 5.12.7Fixed in: yamcs-core 5.12.7Advisory: GHSA-w5r6-mcgq-7pq4 YAMCS is an open-source mission control framework used in real space missions ESA’s OPS-SAT, various ground station deployments. If…
-
Vault Exfiltrator – USB Rubber Ducky Payload
Vault Exfiltrator – USB Rubber Ducky Physical Exfiltration Payload Vault Exfiltrator is a payload designed for the USB Rubber Ducky that physically extracts password manager database files from a target…
-
OrbiDump
OrbiDump visualizes thousands of active satellites in real time using live TLE data from Celestrak. It combines a 3D Earth model with accurate orbit propagation (SGP4) and includes satellite metadata…
-
Vault scanner: a script for Rubber Ducky
Vault Scanner – USB Rubber Ducky Payload Analysis This document describes Vault Scanner, a keystroke injection payload for the USB Rubber Ducky. It automates the discovery of password manager database…
-
Noise, RF and an RTL-SDR
The sky and space have always been a kind of last frontier for humanity — an obsession carried since the first curious mind wondered whether something might be out there,…
Notes, scripts & things that barely works
Categoríaselige tu basura
Últimos dropsrecién sacado del cubo