ODAK A.I CyberSecurity Scoring
14/12/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for ODAK in 2026.
No incidents recorded for ODAK in 2026.
No incidents recorded for ODAK in 2026.
MANTECH is more than a technology company. We are a company dedicated to service, and we consider our work a part of the public trust. The people of MANTECH are privileged to work for the security of the United States, the welfare of our service members and veterans, the protection of our communities, and the cause of better health care. We have served the nation for more than 57 years, and in that time we have continually changed and grown to provide the technology that government needs to meet new challenges. We seek people with the same strong ethic of service, creativity, energy, and dedication to serving our country. We are comprised of more than 9,800 talented employees around the world. Nearly 40% of our employees are veterans. Many others come from the Intelligence Community, Homeland Security and federal civilian agencies. We understand our customers’ challenges because we know their world firsthand. When Federal managers and military leaders face tough challenges in cyber, data collection & analysis, enterprise IT or systems and software engineering, they turn to MANTECH to get the job done right. These professionals trust MANTECH and stay with us for years because we understand their needs and tackle their most complex challenges head on. They know that reaching their goal is our ultimate objective.
Latest updates, reports, and threat intel affecting the global network.
At Kodak, we approach this issue from the software engineering side by what's called network segmentation. Part of that approach is to isolate...
A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no_log, unlike the sibling password parameter in the same module. As a consequence, the supplied IPA/LDAP bind password is recorded in cleartext in the managed host's system journal/syslog (the module's "Invoked with" record), is included in the module's return values and verbose (-v) output, and is displayed in Automation Controller / AWX job output. The password is additionally passed on the command line to the ipa-getkeytab helper (as --bindpw <value>), exposing it in the process list to local users while the command runs. An attacker able to read these logs, job output, or the process table can obtain the directory bind credential, potentially compromising the accounts and objects that credential can access.
The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF).
disconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these four paths, so any anonymous attacker can read every configuration item and configuration file managed by the config center.
Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.