CVE-2025-28389 Insecure Authentication - Clear Text Password 9.8 CRITICAL

CVE-2025-28388 Insecure Authentication - Service Account 9.8 CRITICAL

CVE-2025-28384 Arbitrary File Read From Script-API 9.1 CRITICAL

CVE-2025-28386 Remote Code Execution During Plugin Install 9.8 CRITICAL

CVE-2025-28382 Arbitrary File Deletion/Copy From OpenC3-API 7.5 HIGH

CVE-2025-28381 Credential Leak from Docker Container 7.5 HIGH

CVE-2025-28380 Stored XSS in Telemetry Viewer 6.1 MEDIUM

CVE-2025-25374 Denial of Service via External Applications 7.5 HIGH

CVE-2025-25373 RCE via Memory Management Module 9.8 CRITICAL

CVE-2025-25372 Denial of Service via invalid memory access of management module 7.5 HIGH

CVE-2025-25371 Directory Traversal in OSAL 7.5 HIGH

CVE-2024-55030 Denial of service on FSW via Queue Overflow 9.8 CRITICAL

CVE-2024-55029 Multiple XSS vulnerabilities F' GDS 6.1 MEDIUM

CVE-2024-55028 Template Injection on the Dashboard Tab of F' GDS 9.8 CRITICAL

CVE-2024-44912 Out-of-Bounds read on TM 7.5 HIGH

CVE-2024-44911 Out-of-Bounds read on TC 7.5 HIGH

CVE-2024-44910 Out-of-Bounds read on AOS 7.5 HIGH

CVE-2024-38447 Incorrect Access Control 8.1 HIGH

CVE-2024-38446 Incorrect Access Control 6.5 MEDIUM

CVE-2024-35060 Multiple LCE using Yaml 7.5 HIGH

CVE-2024-35059 Multiple LCE using Pickle 7.5 HIGH

CVE-2024-35058 LCE using EVAL in API 7.5 HIGH

CVE-2024-35057 LCE using EVAL in TLM 7.5 HIGH

CVE-2024-35056 SQL injection 9.8 CRITICAL

CVE-2023-47311 Clickjacking 6.1 MEDIUM

CVE-2023-46471 Stored XSS in ScriptViewer 5.4 MEDIUM

CVE-2023-46470 Stored XSS in Archive Browser 5.4 MEDIUM

CVE-2023-45885 XSS 5.4 MEDIUM

CVE-2023-45884 CSRF 6.5 MEDIUM

CVE-2023-45282 Prototype Pollution 7.5 HIGH

CVE-2023-45281 Insecure Handling of Session Cookie 6.1 MEDIUM

CVE-2023-45280 Stored XSS 5.4 MEDIUM

CVE-2023-45279 Stored XSS 5.4 MEDIUM

CVE-2023-45278 Directory Traversal 9.1 CRITICAL

CVE-2023-45277 Directory Traversal 7.5 HIGH

CTFs

Andy's Cave