PT-2026-28796

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GET /invitations/uuid endpoint can perform a state-changing password reset using an attacker-known invitation UUID, allowing an attacker who can cause a victim to visit...

PT-2026-28795

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GithubApp api url field is used as the base URL for server-side HTTP requests without allowlisting or private IP blocking, allowing an authenticated user to configure a...

PT-2026-28794

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.471 Description The ActivityMonitor Livewire component exposes a public $activityId property that lacks the Locked attribute. The system loads activities using the Activity::find function without implementi...

PT-2026-28797

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the TrustProxies middleware trusts all proxies $proxies = '', accepting X-Forwarded-Host from any source. The TrustHosts middleware, intended to prevent host header attacks...

PT-2026-28793

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, the executeInDocker helper wraps user-controlled commands in single quotes without escaping embedded single quotes. Attackers who can edit application settings can inject a...

PT-2026-1177

CVE-2025-34167 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-34167 Published : Jan. 2, 2026, 5:15 p.m. | 14 minutes ago Description : Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. Severity: 0.0 | NA Visit the lin...

CVE-2024-34167

creationtimestamp| type| source ---|---|--- 2024-11-13 23:43:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113478296139698010 2025-11-17 10:43:25+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m5t23yf2qc25...

CVE-2024-34167

Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34167

CVE-2024-34167 describes an uncontrolled search path vulnerability in the Intel Server Board S2600ST Family BIOS and Firmware Update software (all versions). Connected sources corroborate a local-privilege-escalation issue when an authenticated user gains local access, caused by improper handling...

CVE-2024-34167

Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34167

creationtimestamp| type| source ---|---|--- 2023-06-19 20:25:41+00:00| seen| https://t.me/cibsecurity/65350...

CVE-2023-34167

Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled...

CVE-2023-34167

Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled...

CVE-2023-34167

Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled...

CVE-2023-34167

CVE-2023-34167 affects Huawei Desktop on HarmonyOS. The issue is a whitelist emulation vulnerability in Huawei Desktop that enables spoofing of trustlists, allowing malicious third-party apps to hide desktop icons and thereby hinder uninstallation. Effects described across sources include icons b...

CVE-2021-34167

creationtimestamp| type| source ---|---|--- 2023-02-25 00:19:37+00:00| seen| https://t.me/cibsecurity/58897 2025-05-03 03:04:07+00:00| seen| https://gist.github.com/f1rstb100d/df88af97c297a31207d95efbb12105f9...

CVE-2021-34167

Cross Site Request Forgery CSRF vulnerability in taoCMS 3.0.2 allows remote attackers to gain escalated privileges via taocms/admin/admin.php...

CVE-2021-34167

CVE-2021-34167 is a confirmed CSRF vulnerability in taoCMS 3.0.2 that allows remote attackers to escalate privileges via taocms/admin/admin.php . The CVSS details indicate an overall HIGH impact (8.8) with attack vector: NETWORK , attack complexity: LOW , privileges required: NONE , and user inte...

Security Bulletin: IBM CICS TX Standard is vulnerable to a stored cross-site scripting attack (CVE-2022-34167)

Summary IBM CICS TX Standard could allow users to embed arbitrary JavaScript code which may allow trusted credentials disclosure. The fix removes this vulnerability CVE-2022-34167 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34167 DESCRIPTION: IBM CICS TX is vulnerable to store...

Security Bulletin: IBM CICS TX Advanced is vulnerable to a stored cross-site scripting attack (CVE-2022-34167)

Summary IBM CICS TX Advanced could allow users to embed arbitrary JavaScript code which may allow trusted credentials disclosure. The fix removes this vulnerability CVE-2022-34167 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34167 DESCRIPTION: IBM CICS TX is vulnerable to store...