Lucene search
+L

264 matches found

NVD
NVD
added 2025/12/23 10:15 p.m.9 views

CVE-2025-66211

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in PostgreSQL Init Script Filename handling allows users with application/service management permissions to execute...

9.4CVSS0.02749EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2025/12/23 10:0 p.m.35 views

CVE-2025-66211 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in PostgreSQL Init Script Filename handling allows users with application/service management permissions to execute...

9.4CVSS0.02749EPSS
SaveExploits2References4
OSV
OSV
added 2025/12/23 10:0 p.m.8 views

CVE-2025-66211 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in PostgreSQL Init Script Filename handling allows users with application/service management permissions to execute...

9.4CVSS9.1AI score
SaveExploits0References6
CVE
CVE
added 2025/12/23 10:0 p.m.19 views

CVE-2025-66211

CVE-2025-66211 affects Coolify prior to 4.0.0-beta.451. An authenticated command injection in PostgreSQL Init Script Filename handling allows users with application/service management permissions to run arbitrary commands as root on managed servers. Shell commands receive unvalidated PostgreSQL i...

9.4CVSS8.8AI score0.03826EPSS
SaveExploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/23 10:0 p.m.4 views

CVE-2025-66211 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in PostgreSQL Init Script Filename handling allows users with application/service management permissions to execute...

9.4CVSS8.8AI score0.03826EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/12/23 10:0 p.m.5 views

EUVD-2025-204957

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in PostgreSQL Init Script Filename handling allows users with application/service management permissions to execute...

9.4CVSS8.6AI score0.03826EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2025/12/23 12:0 a.m.7 views

PT-2025-52854

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.451 Description Coolify is a self-hostable tool for managing servers, applications, and databases. A command injection issue exists in the handling of PostgreSQL Init Script Filenames. An authenticated user...

9.9CVSS8.4AI score0.03826EPSS
SaveExploits2References12
RedhatCVE
RedhatCVE
added 2025/11/10 5:22 a.m.8 views

CVE-2025-12915

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

7.1CVSS5.9AI score0.00418EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/09 12:30 a.m.9 views

EUVD-2025-38439

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

7.1CVSS5.5AI score0.00418EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/08 11:15 p.m.12 views

CVE-2025-12915

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

7.1CVSS0.00418EPSS
SaveExploits1References4
OSV
OSV
added 2025/11/08 11:15 p.m.8 views

CVE-2025-12915

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

7.1CVSS5.2AI score0.00418EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/11/08 11:2 p.m.17 views

CVE-2025-12915 70mai X200 Init Script file inclusion

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

7.1CVSS0.00418EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/11/08 11:2 p.m.6 views

CVE-2025-12915 70mai X200 Init Script file inclusion

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

7.1CVSS5.9AI score0.00418EPSS
SaveExploits1References4
CVE
CVE
added 2025/11/08 11:2 p.m.19 views

CVE-2025-12915

CVE-2025-12915 – 70mai X200 : Affects versions up to 20251019. The issue stems from the Init Script Handler component, enabling a local file-inclusion flaw. Attack requires local access with high complexity; exploitability is described as difficult. Public exploit exists. Vendor has been contacte...

7.1CVSS5.9AI score0.00418EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2025/11/08 12:0 a.m.7 views

70mai X200 安全漏洞

70mai X200 is a head-only car recorder from 70mai 70mai, a Chinese company. A security vulnerability exists in 70mai X200 20251019 and earlier versions, which stems from a file inclusion issue in the component Init Script Handler that could lead to a local attack...

7.1CVSS6.4AI score0.00418EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/08 12:0 a.m.9 views

PT-2025-45572

Name of the Vulnerable Software and Affected Versions 70mai X200 versions up to 20251019 Description A flaw exists in the Init Script Handler component of the software that allows for file inclusion. The attack requires local access and is considered difficult to exploit. The exploit has been...

7.1CVSS6AI score0.00418EPSS
SaveExploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2013-0358

Malware in sbrugna...

7.2CVSS6.2AI score0.00483EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-6287

Malware in sbrugna...

7.3CVSS7.1AI score0.01016EPSS
SaveExploits4References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2005-3118

Malware in sbrugna...

7.5CVSS6.1AI score0.01392EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2017-15563

Malware in sbrugna...

5.9CVSS6AI score0.01589EPSS
SaveExploits0References8
Rows per page
Query Builder