CVE-2025-28386 – OpenC3 COSMOS Plugin Management RCE

June 13, 2025

CVE ID : CVE-2025-28386

Published : June 13, 2025, 2:15 p.m. | 3 hours, 51 minutes ago

Description : A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary code via uploading a crafted .txt file.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-28388 – OpenC3 COSMOS Hardcoded Credentials Vulnerability

Next Article CVE-2025-28384 – OpenC3 COSMOS Directory Traversal Vulnerability

Highlights

CVE-2025-5516 – TOTOLINK X2000R Cross-Site Scripting Vulnerability

June 3, 2025

CVE ID : CVE-2025-5516

Published : June 3, 2025, 6:15 p.m. | 1 hour, 15 minutes ago

Description : A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108. This affects an unknown part of the file /boafrm/formFilter of the component URL Filtering Page. The manipulation of the argument URL Address leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 2.4 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

How To Prevent WordPress SQL Injection Attacks

This week in AI dev tools: Apple’s Foundations Model framework, Mistral’s first reasoning model, and more (June 13, 2025)

Open Talent platforms emerging to match skilled workers to needs, study finds

Java never goes out of style: Celebrating 30 years of the language

6 registry tweaks every tech-savvy user must apply on Windows 11

Here’s why network infrastructure is vital to maximizing your company’s AI adoption

The AI video tool behind the most viral social trends right now

Got a new password manager? How to clean up the password mess you left in the cloud

Right Invoicing App for iPhone: InvoiceTemple

Right Invoicing App for iPhone: InvoiceTemple

Tunnel Run game in 170 lines of pure JS

Integrating Drupal with Salesforce SSO via SAML and Dynamic User Sync

6 registry tweaks every tech-savvy user must apply on Windows 11

6 registry tweaks every tech-savvy user must apply on Windows 11

Is Chrome Copying Edge? ‘Omnibox Tools’ Bring Edge-Style Address Bar Shortcuts

Windows 11 24H2’s new Start Menu auto-changes size based on screen resolution

CVE-2025-28386 – OpenC3 COSMOS Plugin Management RCE

Tenable Agent for Windows Vulnerability Let Attackers Login as Admin to Delete The System Files

Meta Invests $14.3 Billion in Scale AI, Recruits Founder Alexandr Wang for Superintelligence Lab

SAP June 2025 Patch Day – 14 Vulnerabilities Patched Across Multiple Products

Master Database Management Systems

CVE-2025-5711 – Real Estate Property Management System SQL Injection Vulnerability

CVE-2025-24342 – CtrlX OS Username Guessing Information Disclosure Vulnerability

CVE-2025-5516 – TOTOLINK X2000R Cross-Site Scripting Vulnerability

CVE-2025-20101 – Intel Graphics Driver Out-of-Bounds Read Vulnerability

Senua’s Saga: Hellblade 2 comes to PS5 with “exciting new features,” Xbox and PC getting free update

CVE-2025-45855 – Erupt Elevation of Privilege (Arbitrary Code Execution)

CVE-2025-28386 – OpenC3 COSMOS Plugin Management RCE

Related Posts