ASBO A.I CyberSecurity Scoring
13/02/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for AFRL Small Business Office in 2026.
No incidents recorded for AFRL Small Business Office in 2026.
No incidents recorded for AFRL Small Business Office in 2026.
Latest updates, reports, and threat intel affecting the global network.
Partnership will deliver mission-critical skills data for more than 14000 Guardians, accelerating mastery of AI, cybersecurity,...
The innovation arm of the Air Force removed the newest topics for possible small business research and investment Tuesday for an “internal review.”
Is your cybersecurity as a government contractor ready to fight against evolving cyber threats? In today's fast-paced cyber environment,...
WRIGHT-PATTERSON AIR FORCE BASE, Ohio (AFRL) — In defense innovation, rigorous scrutiny is not just an afterthought; it's the law.
WRIGHT-PATTERSON AIR FORCE BASE, Ohio (AFRL) – AFWERX, the Department of the Air Force's innovation arm, met with technologists,...
GRAND RAPIDS, Mich., February 26, 2024 (Newswire.com) - DornerWorks announces it has been selected by AFWERX for a SBIR in the amount of...
With a new $26.7 million grant from the US Air Force, Montana State University will establish a facility with the mission of moving advanced quantum technology...
This contract will focus on On-Orbit computing to address the most pressing challenges that the Department of the Air Force (DAF) currently faces.
Explore top government contracts awarded by the Air Force Research Lab, featuring major deals in aerospace, space, cybersecurity and...
Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control routing for their assigned hosts.
Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2fa to gain full session access and administrative control.
httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as clickable links in the web interface. Attackers controlling traffic recorded by httpdbg can supply javascript: scheme URLs that execute malicious scripts in the application origin when clicked, allowing access to captured request and response data including headers and tokens.
Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs.
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.