CVE-2024-56799

Simofa is a tool to help automate static website building and deployment. Prior to version 0.2.7, due to a design mistake in the RouteLoader class, some API routes may be publicly accessible when they should require authentication. This vulnerability has been patched in v0.2.7...

CVE-2025-23902

CVE-2025-23902 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Error Notification (Taras Dashkevych). Affected versions are listed as up to 0.2.7 (scope: from n/a through 0.2.7). The Red Hat advisory confirms the same CVE and description. There are no connected...

WordPress Error Notification plugin <= 0.2.7 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Error Notification versions = 0.2.7...

WordPress plugin Error Notification 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2024-56799

Simofa is a tool to help automate static website building and deployment. Prior to version 0.2.7, due to a design mistake in the RouteLoader class, some API routes may be publicly accessible when they should require authentication. This vulnerability has been patched in v0.2.7...

CVE-2024-56799 Simofa Allows Unauthenticated Access to API Routes

Simofa is a tool to help automate static website building and deployment. Prior to version 0.2.7, due to a design mistake in the RouteLoader class, some API routes may be publicly accessible when they should require authentication. This vulnerability has been patched in v0.2.7...

CVE-2024-56799 Simofa Allows Unauthenticated Access to API Routes

Simofa is a tool to help automate static website building and deployment. Prior to version 0.2.7, due to a design mistake in the RouteLoader class, some API routes may be publicly accessible when they should require authentication. This vulnerability has been patched in v0.2.7...

PT-2024-37073 · Simofa · Simofa

Name of the Vulnerable Software and Affected Versions: Simofa versions prior to 0.2.7 Description: Simofa is a tool to help automate static website building and deployment. Due to a design mistake in the RouteLoader class, some API routes may be publicly accessible when they should require...

TrueWinter simofa 访问控制错误漏洞

TrueWinter simofa is a tool from TrueWinter to help automate the building and deployment of static websites. An access control error vulnerability exists in versions of TrueWinter simofa prior to 0.2.7 that stems from a design error in the RouteLoader class, where some API routes may be publicly...

CVE-2024-50947

An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2024-44775

An issue in kmqtt v0.2.7 allows attackers to cause a Denial of ServiceDoS via a crafted request...

CVE-2024-44775

kmqtt v0.2.7 is vulnerable to Denial of Service DoS due to a Null Pointer Exception. A remote attacker can cause the broker to crash by sending a specially crafted MQTT CONNECT packet that triggers an unhandled null reference, leading to an immediate process termination...

PT-2024-31243 · Kmqtt · Kmqtt

Name of the Vulnerable Software and Affected Versions: kmqtt version 0.2.7 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted request. Recommendations: For kmqtt version 0.2.7, at the moment, there is no information about a newer version that contains a fix for...

SUSE CVE-2017-6831

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2022-24193

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability...

CasaOS 操作系统命令注入漏洞

CasaOS is a simple, easy-to-use and elegant open source home cloud system. A command injection vulnerability exists in CasaOS versions prior to 0.2.7. The vulnerability stems from the failure of a networked system or product to properly filter special characters, commands, etc. from a user's inpu...

CVE-2022-24193

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability...

PT-2022-16533 · Casaos · Casaos

Name of the Vulnerable Software and Affected Versions: CasaOS versions prior to 0.2.7 Description: The issue is a command injection vulnerability. It can be exploited via the component that handles leave or join zerotier API requests. Recommendations: For versions prior to 0.2.7, update to versio...

CVE-2021-29642

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

ifinfo (=0.1.0), prosafe_exporter (>=0.1.1 <=0.2.7) potentially affected by unknown CVE via interfaces2 (=0.0.5)

interfaces2 CARGO version =0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on interfaces2 and may be impacted: - ifinfo =0.1.0 - prosafeexporter =0.1.1, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0002...