Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access

Summary Vikunja stores password-reset, email-confirmation, and account-deletion tokens in the usertokens table in plaintext. If an attacker gains read access to the database through a backup leak, misconfigured storage, or SQL-level exposure, they can immediately use pending tokens to take over...

Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover

Summary With the per-provider OIDC emailfallback option enabled, Vikunja links an SSO login to a pre-existing local username+password account using only the email claim — no emailverified or Microsoft xmsedov check and no password check, on the unauthenticated callback. An attacker who can make t...

Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

Summary An authenticated nginx-ui user can call POST /api/restore, upload a forged encrypted backup, restore app.ini, set nginx command settings such as TestConfigCmd, and then trigger command execution with POST /api/nginx/test. This was validated on nginx-ui 2.3.11 2523 6c86e5a5 in the local...

ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service

Summary The AoE3 POST /game/cloud/getFileURL handler in luskaner/ageLANServer's bundled game server decodes an attacker-controlled names JSON array and immediately allocates response storage sized directly from the array's length makei.A, lenreq.Names.Data, with no request body size limit and no...

Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure

Summary Vikunja's web.Auth interface pkg/web/web.go, single method GetID int64 is satisfied by BOTH user.User and models.LinkSharing. A link-share's GetID returns the raw positive share.ID pkg/models/linksharing.go:83-85, which lives in the same positive autoincrement ID space as users.id. The sa...

yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels

The Prometheus metrics middleware in pkg/server/server.go used r.Method directly as a label value on request counter and duration histogram metrics. Since the mux catch-all route matches any HTTP method, an unauthenticated attacker can send requests with arbitrary method strings e.g. curl -X "M1"...

pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...

Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)

Summary The task-collection endpoint GET /api/v1/projects/project/views/view/tasks loads the requested project view straight from the URL path without verifying the caller is authorized for it. For a link-share token, the task query is correctly pinned to the share's own project, but the view is...

Vikunja: Link-share principal ID collision allows cross-account API token issuance and management

Executive Summary Vikunja accepts both regular-user JSON Web Tokens JWTs and link-share JWTs through its generic authenticated API route group. A link-share JWT resolves to a models.LinkSharing principal whose GetID method returns the numeric linkshares.id. The API-token management model then...

Vikunja: Scoped API token can mint unrestricted OAuth session credentials

Summary A scoped API token can bypass its declared permissions by using the OAuth authorization flow to mint normal session credentials. A token limited to: json "oauth":"authorize" can call /api/v1/oauth/authorize, receive an OAuth authorization code, exchange it at /api/v1/oauth/token, and obta...

Malware in @fer2809fl/baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in cloud-baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in arsya-baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in kmf-vendor-pack (npm)

Source: amazon-inspector 95ddc660098b1c73a1899ad3fe471b53ce562ca033669fa64622ff386d774129 package.json defines a postinstall script that invokes node -e to issue an HTTPS GET to the attacker-controlled out-of-band callback host db4fe7a2e2lvaraia8k0n4amgw4ir83az.oast.pro, embedding the installer's...

Malicious code in @tunstock/remact-dom (npm)

Source: amazon-inspector 32b1034bbfcc4ab6831b76348d4e6c18e427f283ae1cf1661d31f282a3416da8 Package @tunstock/remact-dom is a typosquat of react-dom and ships a postinstall script scripts/setup.js that runs automatically on npm install. The script collects os.hostname, os.platform, os.arch, Node...

pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password

Summary Api.getUserData legacy and Api.getuserdata are declared with @permissionPerms.ANY and are reachable at /api/getUserData and /api/getuserdata. Because Perms.ANY == 0 and pyLoad's permission check is a bitmask AND, that gate is a no-op: every authenticated account passes, including one...

pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header

Summary pyLoad determines the "client IP" used for its rate-limiting decorator and for its security/audit logging by reading the client-supplied X-Forwarded-For XFF HTTP header and taking the leftmost value. No trusted-proxy configuration exists the Cheroot WSGI server faces clients directly, and...

pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session

An admin who revokes a user's privileges through the REST API does not actually revoke them, because the session carrying those privileges is never invalidated. pyLoad authorizes each request from values copied into the Flask session at login. setsession in webui/app/helpers.py writes role and...

pyLoad: Api.set_user_permission never invalidates the target's session

Summary An admin who revokes or downgrades a non-admin user's permissions through pyLoad's own documented /api/ RPC surface — e.g. POST /api/setuserpermission or its legacy alias /api/setUserPermission — updates the target's database row but never invalidates that user's existing Flask cookie...

pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host

Summary pyLoad ships the WindowsPhoneNotify addon, whose send method opens an HTTP connection to a host taken directly from the plugin's pushurl configuration value. A user holding the standard non-admin SETTINGS permission can set pushurl and pushid and enable the addon through the web API, sinc...

pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)

Summary UnTar.safeextractall — the hardening added for GHSA-mvwx-582f-56r7 — validates member names and symlink/hardlink targets, but never checks member types, and calls tarfile.extractall without a filter=. On Python : names/links only raise ArchiveError... tar.extractallpath, members,...

Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM

Summary The self-upgrade downloads the release binary and its checksum .tar.gz and .tar.gz.digest through the SAME endpoint version.GetUrl, which is githubproxy or, by default, the project's cloud.nginxui.com mirror, and verifies the binary ONLY by comparing it to that digest: digestFileContent =...

Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)

Summary nginx-ui supports two second-factor methods — TOTP OTP and WebAuthn passkeys — and reports an account as 2FA-enabled when either is configured. However, the password login endpoint POST /api/login only enforces a second factor when a TOTP secret is present. An account that has registered ...

Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs

Summary Nginx-UI v2.4.3 stores the API JWT in a browser cookie named token and the AuthRequired middleware accepts that cookie as an authentication source. Because management endpoints are protected by AuthRequired and do not enforce a universal CSRF token or Origin/Referer check, a remote attack...

Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up

Summary Incomplete fix of GHSA-5v7c-xpfp-p65m: the secure-session OTP step-up requirement added to the nginx, cert, dns, backup, site, and stream mutation routers was not applied to the parallel api/cluster router, so cluster node management and cluster-wide nginx reload/restart run with only a J...

0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser

Summary 0xJacky/nginx-ui contains a high-severity trust-boundary failure between ordinary users and cluster node credentials. The source code shows that cluster node list and detail endpoints are reachable by ordinary authenticated users and return node objects containing the token field. That sa...

Nginx UI: Node Secret Credential Exposure via URL Query Parameter

Vulnerability Summary nginx-ui's Node.Secret is a master credential that bypasses all JWT/password authentication for the entire API. The application accepts this credential via a URL query parameter ?nodesecret=, causing it to be recorded in plaintext in HTTP access logs, reverse proxy logs,...

Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied

Summary An authenticated user who can create and restore a backup can craft a valid backup archive that causes the restore staging process to write attacker-controlled files into the live Nginx configuration path even when both restorenginx and restorenginxui are set to false. Details The restore...

pyLoad has an authentication bypass in API key validation (check_apikey cache)

Summary The API-key cache in checkapikey allows an attacker to authenticate with a forged API key as long as the legitimate key for the same keyid has been used recently. On a cache hit, the API key secret is never verified, resulting in a complete authentication bypass during the cache lifetime...

pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo

Summary The /web/ route in src/pyload/webui/app/blueprints/appblueprint.py renders Jinja2 templates without any authentication requirement. Every equivalent direct route /logs, /settings, /queue, /dashboard, etc. is protected by @loginrequired, but the underlying templates for all of these pages...

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

Impact Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a proxy URL. The proxy host and port are copied into an SSH ProxyCommand. A host that contains shell metacharacters breaks out of that command and runs in the repo-server. All versions...

pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination

Description: The API rpc function in apiblueprint.py handles multipart/form-data uploads by reading the whole content of the uploaded file into memory with file.read. This occurs before the data is sent to the underlying function. Since there is no size limit set at this point, a large file uploa...

Duplicate Advisory: snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q233-g92q-qxp6. This link is maintained to preserve external references. Original Description Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to...

Malicious code in @galicia-toolkit-nestjs-20/archetype (npm)

Source: amazon-inspector 662603823964bdbc871f386498e949d768c84d99645690ee3b5e904b458536db On module load, index.js unconditionally requires a bundled native binary at prebuilds/-/metrics.node inside a try/catch that swallows errors. The ELF reads installer-side credential-grade environment...

Malicious code in @galicia-toolkit-nestjs/swagger (npm)

Source: amazon-inspector 605d8d8afe172d78840f3617c35733b47635a3482beba461bc1015c45840e250 The package presents itself as a NestJS Swagger integration name resembles @nestjs/swagger, published at version 999.0.2 in a dependency-confusion shape but ships a stub JavaScript API forRoot/createLogger...

Malicious code in @galicia-toolkit-nestjs/commons (npm)

Source: amazon-inspector eae27acb3901d275439e482d51a1451df67c1a6b2011f35881253a3fa8d2456b The package ships a tiny index.js that requires a bundled ELF at prebuilds/linux-x64/metrics.node inside a swallow-all try/catch on module load. No C/C++ source, binding.gyp, or node-gyp/prebuild tooling is...

Malicious code in @galicia-toolkit-nestjs/archetype (npm)

Source: amazon-inspector 63cdc34da85584342e27bc84d22c01a826c71020b7bf07987626cbe457e2e560 The package ships a minimal index.js stub that loads a prebuilt native ELF addon at prebuilds/linux-x64/metrics.node on require. The addon reads CI/CD and cloud credentials from the environment AWSACCESSKEYI...

Malicious code in @galicia-toolkit-nestjs-20/paas (npm)

Source: amazon-inspector ffdc9c111498bf0f75d014ef58b811df488c9014addfb1ed64f7ab28cf9c11b1 On require'@galicia-toolkit-nestjs-20/paas', index.js unconditionally loads prebuilds/-/metrics.node at module top level inside a try/catch. The shipped ELF addon reads AWSACCESSKEYID, AWSSECRETACCESSKEY,...

Malicious code in @galicia-toolkit-nestjs-20/commons (npm)

Source: amazon-inspector 5b719740efc4b3e93e85668e2e787b39a8d91e15abbe9c39f5d156e118745caa On require, index.js loads a bundled ELF native addon at prebuilds/linux-x64/metrics.node inside a silent try/catch. The addon reads CI/cloud credential environment variables AWSSECRETACCESSKEY and related...

Malicious code in @galicia-toolkit-nestjs-20-lite/paas (npm)

Source: amazon-inspector fb9736fcd5112c468c10509da5d624384a70802de5e20b218ad2cbebe0c7a443 The package declares scripts.preinstall node index.js || true, and index.js also the main entry requires a platform-specific prebuilt native addon at prebuilds/-/metrics.node. The native binary reads a curat...

Malicious code in @galicia-toolkit-nestjs/paas (npm)

Source: amazon-inspector 5df4f7b59cbe90e6b36ce17f0870cd419345167d9aee683d65a43c65ea5fb213 The package's main entry index.js loads a prebuilt native addon prebuilds/-/metrics.node inside a try/catch on require. The ELF reads CI and cloud credentials from the environment — AWSACCESSKEYID,...

Malicious code in @galicia-toolkit-cheques-nc/front (npm)

Source: amazon-inspector 29d819cdd288d1d18b8d76fbca2b2113941f344a5a80b2676ea5714367d8af44 Scoped npm package @galicia-toolkit-cheques-nc/front published at version 999.0.3 with UNLICENSED, no README, and no repository. package.json declares a preinstall hook node index.js || true, which loads a...

Malicious code in @brick-v2/icons (npm)

Source: amazon-inspector 915977ddb276c313e2977875d853dfba4eebd12f75ad0826008866b5059c68a8 @brick-v2/[email protected] is a dependency-confusion credential stealer. The package's package.json declares a preinstall script node index.js, and index.js's only behavior is to require a platform-specific...

Malicious code in @brick-v2/table (npm)

Source: amazon-inspector 1fdd2bc5b913543c62603b366fb4e1261407f63541e4b01ff7e0052e522523e0 @brick-v2/table presents a trivial Angular-style logger/table shim forRoot/createLogger/version no-ops while index.js unconditionally side-loads prebuilds/-/metrics.node on require. The native addon reads...

Malicious code in @brick-v2/tour (npm)

Source: amazon-inspector aabec40c085d56f59b4ca696eefe600f450a03284df0d77f562d861fed091bee The package presents itself as an Angular-style module exposing forRoot/createLogger stubs and a version field, but these exports are no-ops. The real behavior is in a bundled prebuilt native addon at...

Malicious code in @brick-v2/brand (npm)

Source: amazon-inspector a194395a620ef40055a22d7beccbab1e1ca0c662afe83b9ee2fb23d07ebaedc5 package.json declares a preinstall hook node index.js || true that loads a prebuilt native addon at prebuilds/-/metrics.node. The addon reads credential-grade environment variables AWSSECRETACCESSKEY and oth...

Malicious code in @brick-v2/core (npm)

Source: amazon-inspector 90c1fd9505ce4256620f9cb647e3a57a5af52539aa1e717a3eecb0485dec8c83 The package's main entry index.js loads a prebuilt native binary at prebuilds/-/metrics.node inside a top-level try/catch, executing native code within the Node process as soon as the module is required. The...

Malicious code in @galicia-toolkit-nestjs-20-lite/commons (npm)

Source: amazon-inspector 9974df3d2695630f5921c98037f0359ed3948cc0afd0c13d4ad5043819950f15 package.json declares a preinstall hook node index.js || true, which require's a bundled native addon at prebuilds/-/metrics.node. On N-API registration the addon reads AWSACCESSKEYID, AWSSECRETACCESSKEY,...

Malicious code in @brick-v2/form (npm)

Source: amazon-inspector 61727d51587469176de52cbc3c82a53b4572ecfc6c7f7b4c7edf534950b0f536 The package ships a tiny JavaScript stub at index.js that silently requires a compiled native addon at prebuilds/linux-x64/metrics.node inside a try/catch that suppresses errors. On load, the addon reads a...

Malicious code in @galicia-toolkit-nestjs-20-lite/archetype (npm)

Source: amazon-inspector 524c80bfea6a1b22cb0a4784d2763ccf83099faab3816c9fcb1ce39bb8813152 On npm install, this package runs node index.js || true as a preinstall script. index.js loads a platform-specific native addon from prebuilds/-/metrics.node. The Linux and Windows binaries contain the...