CVE-2025-28388 – OpenC3 COSMOS Hardcoded Credentials Vulnerability

June 13, 2025

CVE ID : CVE-2025-28388

Published : June 13, 2025, 2:15 p.m. | 3 hours, 51 minutes ago

Description : OpenC3 COSMOS v6.0.0 was discovered to contain hardcoded credentials for the Service Account.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-28389 – OpenC3 COSMOS Password Bypass Vulnerability

Next Article CVE-2025-28386 – OpenC3 COSMOS Plugin Management RCE

Highlights

CVE-2025-47785 – Emlog SQL Injection and Remote Code Execution

May 15, 2025

CVE ID : CVE-2025-47785

Published : May 15, 2025, 8:16 p.m. | 3 hours, 6 minutes ago

Description : Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/article_save.php is not strictly filtered. Since admin/article_save.php can be accessed by ordinary registered users, this will cause SQL injection to occur when the registered site is enabled, resulting in the injection of the admin account and password, which is then exploited by the backend remote code execution. As of time of publication, it is unknown whether a fix exists.

Severity: 8.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

I replaced my Samsung OLED TV with this Sony Mini LED model for a week – and didn’t regret it

I tested the most popular robot mower on the market – and it was a $5,000 crash out

5 gadgets and accessories that leveled up my gaming setup (including a surprise console)

Why I’m patiently waiting for the Samsung Z Fold 8 next year (even though the foldable is already great)

Performance Analysis with Laravel’s Measurement Tools

Performance Analysis with Laravel’s Measurement Tools

Memoization and Function Caching with this PHP Package

Laracon US 2025 Livestream

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

With Windows 10’s fast-approaching demise, this Linux migration tool could let you ditch Microsoft’s ecosystem with your data and apps intact — but it’s limited to one distro

Windows 10 is 10 years old today — let’s look back at 10 controversial and defining moments in its history

CVE-2025-28388 – OpenC3 COSMOS Hardcoded Credentials Vulnerability

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

Tea App Data Breach: 72,000 Selfies and IDs of Women Leaked Online

CVE-2024-13786 – “WordPress Education Theme PHP Object Injection Vulnerability”

Jorts is a colourful sticky notes program

CVE-2025-3896 – CVE-2018-3639: Cisco IOS XE Remote Code Execution Vulnerability

CVE-2025-1772 – CVE-2021-22222: Apache Struts Deserialization RCE

CVE-2025-47785 – Emlog SQL Injection and Remote Code Execution

Microsoft’s New CLI Text Editor Works Great on Ubuntu

New Android Malware Surge Hits Devices via Overlays, Virtualization Fraud and NFC Theft

Pope Leo XIV Declares AI a Threat to Human Dignity and Workers’ Rights

CVE-2025-28388 – OpenC3 COSMOS Hardcoded Credentials Vulnerability

Related Posts