📦 Orion Ops

This CVE describes an improper authorization vulnerability in orion-ops that allows attackers to manipulate user IDs in the user profile update function. Attackers can exploit this flaw remotely to po...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in orionsec's orion-ops software. Attackers can manipulate SSH connection parameters (host, port, username, password, authType) to...

This CVE describes an improper authorization vulnerability in orionsec orion-ops API that allows unauthorized access to machine key functionality. Attackers can remotely exploit this to access sensiti...