Comparison Overview
AMETEK MRO
AMETEK MRO
4085 Southwest Blvd, Tulsa, Oklahoma, 74107, US
Last Update: 21/02/2026
AMETEK MRO, a division of AMETEK, Inc., is a global provider of third-party MRO services to commercial, regional and general aviation. Our operations specialize in a wide range of repair and overhaul services and are FAA, EASA, CAAC, and CAAS approved.
NASA - National Aeronautics and Space Administration
300 E Street SW, Washington, 20546, US
Last Update: 03/04/2026
For more than 60 years, NASA has been breaking barriers to achieve the seemingly impossible—from walking on the Moon to pushing the boundaries of human spaceflight farther than ever before. We work in space and around the world in laboratories and wind tunnels, on airfi...
Compliance Ranges Comparison
AMETEK MRO
NASA - National Aeronautics and Space Administration
Benchmark & Cyber Underwriting Signals
Incidents vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)
No incidents recorded for AMETEK MRO in 2026.
Incidents vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)
No incidents recorded for NASA - National Aeronautics and Space Administration in 2026.
Incident History - AMETEK MRO (X = Date, Y = Severity)
AMETEK MRO cyber incidents detection timeline including parent company and subsidiaries.
Incident History - NASA - National Aeronautics and Space Administration (X = Date, Y = Severity)
NASA - National Aeronautics and Space Administration cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
AMETEK MRO
NASA - National Aeronautics and Space Administration
FAQ
Latest Global CVEs
PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution.
PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs. Attackers can exploit the lack of agent ID uniqueness enforcement to share ledger instances and expose system prompts and conversation history between agents.
PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution. The POST /agui endpoint lacks authentication and hardcodes Access-Control-Allow-Origin: * headers, combined with Starlette's Content-Type-agnostic JSON parsing, enabling attackers to bypass CORS preflight checks via simple requests and exfiltrate sensitive agent responses including tool execution results and environment data.
PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable. Authenticated attackers can instruct the LLM agent to execute arbitrary shell commands via subprocess.run with shell=True, bypassing the manual approval gate and insufficient command sanitization blocklists.
PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and credentials via subsequent shell commands without user consent.