coolify-cve-2025-66209-66213

Coolify 보안 권고 - CVE-2025-66209 CVE-2025-66213 보고자: 0xrakan 공급업체: coollabsio/coolify 영향받는 버전: v4.0.0-beta.451 수정된 버전: v4.0.0-beta.451 심각도: 치명적 CVSS 9.4 개요 Coolify에서 다섯 가지 치명적인 인증된 명령 삽입 취약점이 발견되었습니다. 이 취약점은 애플리케이션/서비스 관리 권한을 가진 인증된 사용자가 관리 서버에서 루트 권한으로 임의 명령을 실행할 수 있게 하여, 컨테이너 탈출 및 호스트 시스템 전체 손상으로...

CVE-2026-14361

CVE-2026-14361 Consul Template の writeToFile ヘルパーは、オペレーターが指定した宛先を直接開き、リンクされたパスコンポーネントをたどるため、レンダリングされた出力が意図したディレクトリの外に逃れ、既存のファイルを上書きする可能性がありました。 はじめに この問題は、HashiCorp Consul Template をレビューしているときに、直接的なファイルシステムのセキュリティ問題を念頭に置いて見つけました。 writeToFile...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro 완화 방법 Canvas Designer 플러그인을 이 취약점이 패치된 최신 버전으로 업데이트하세요. 또는 플러그인에서 직접 파일 업로드를 제한하고 업로드된 파일 내용에 대한 적절한 검증을 보장하세요. 사이트 관리자는 다음을 권장합니다: 취약한 버전을 즉시 제거하세요. 보안 강화를 적용하세요예: 업로드 디렉터리에서 PHP 실행 비활성화. 웹 애플리케이션 방화벽WAF을 사용하여 악성 AJAX 요청을 차단하세요...

CVE-2024-45427-Exploit

CVE-2024-45427 漏洞利用生成器 该脚本生成一个恶意的 Excel .xlsx 文件，用于利用 PhpSpreadsheet 库 v3.7.0 中的 CVE-2024-45427 漏洞。 它通过操作原始 XML 将 XSS 载荷注入到工作表名称中，从而绕过标准库的验证检查。 使用方法 1. 编辑 exploit.py 并设置你的 MYIP 和 PORT。 2. 运行脚本： python3 exploit.py 3. 启动监听器： python3 -m http.server 8000 4. 将 assignmentexploit.xlsx 上传到目标系统。 免责声明...

WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by Eunho Kim in WordPress Plugin PDF for Contact Form 7 versions = 7.1.0...

WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by Eunho Kim in WordPress Plugin Generate PDF using Contact Form 7 versions = 4.2.1...

Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

jdvrif

jdvrif jdvrif JPG Data Vehicle , v9.0 is a fast, easy-to-use steganography command-line tool for concealing and extracting any file type via a JPG image. Linux only. Your data file is compressed with libdeflate/zlib , then encrypted with XChaCha20-Poly1305 libsodium secretstream under a key deriv...

yoloai

yoloAI AI 코딩 에이전트를 위한 샌드박스 러너. 권한 피로 없음, 박스 안에 자격 증명 없음, 승인하기 전까지 프로젝트에 변경 사항 없음. AI 코딩 에이전트는 가드레일이 없을 때 가장 잘 작동하지만, 실제 머신에서 그렇게 실행하는 것은 매우 위험합니다. yoloAI는 에이전트에게 아무것이나 편집하고 실행할 수 있는 일회용 샌드박스를 제공하여 무인으로 작업할 수 있게 합니다. 프로젝트, 자격 증명, 네트워크는 모두 사용자의 통제 하에 유지됩니다. 에이전트가 작업을 마치면 diff를 검토하고 유지하고 싶은 부분만 적용하세...

CVE-2025-2005

CVE-2025-2005 — Front-End Users Arbitrary File Upload CVE-2025-2005 WordPress Front-End Users — Unauthenticated Arbitrary File Upload 0xZ3R0 // h4ckxel 0x00 — Executive Summary Front-End Users is affected by an unauthenticated arbitrary file upload vulnerability affecting versions ≤ 3.2.32. The...

CVE-2026-97332

The User Private Files WordPress plugin, in versions before 2.2.0 , is vulnerable to unauthenticated private file disclosure on multisite installations. The root cause is a rewrite rule bypass where requests to stored private files do not route through the plugin's required access check. This all...

CVE-2026-97332 User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)

The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...

WordPress User Private Files plugin < 2.2.0 - Unauthenticated Private File Disclosure vulnerability

Unauthenticated Private File Disclosure vulnerability discovered by Akshat Parikh SN1PER in WordPress Plugin User Private Files versions 2.2.0...

CVE-2026-97332 User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)

The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...

WordPress BackupGuard <1.6.0 - Authenticated Arbitrary File Upload

WordPress Backup Guard plugin before 1.6.0 is susceptible to authenticated arbitrary file upload. The plugin does not ensure that imported files are in SGBP format and extension, allowing high-privilege users to upload arbitrary files, including PHP, possibly leading to remote code execution. id:...

TVT NVMS 1000 - Local File Inclusion

TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. id: CVE-2019-20085 info: name: TVT NVMS 1000 - Local File Inclusion author: daffainfo severity: high description: | TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. impact: | An attacker can exploit this...

CVE-2026-105123

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

PT-2026-104618

A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route of the file lib/src/StaticFileRouter.cc of the component Static File Router. Executing a manipulation can lead to path traversal. The attack may be performed from remote. The...

openSUSE 16: libIex-3_2-31 / libIex-3_2-31-x86-64-v3 / libIlmThread-3_2-31 / etc (openSUSE-SU-2026:22013-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22013-1 advisory. This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted...

CVE-2026-105144: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route of the file lib/src/StaticFileRouter.cc of the component Static File Router. Executing a manipulation can lead to path traversal. The attack may be performed from remote. The...