Security

A vulnerability in n8n's XML processing allows authenticated users to manipulate JavaScript object structures through crafted XML data and thereby execute arbitrary code on the server.

A vulnerability in the n8n workflow software allows authenticated users to read local files and execute malicious code through the Merge node due to insufficient restrictions on SQL statements.

A vulnerability in the n8n workflow software allows authenticated users to execute malicious code by manipulating JavaScript prototypes through the XML node component.

A vulnerability in the n8n workflow software allows authenticated users to read arbitrary files from the server and potentially achieve full system compromise through the Git functionality.

A vulnerability in the n8n workflow software allows authenticated users to execute malicious code and compromise the entire system through an unvalidated parameter in the HTTP Request node.

A security flaw in n8n allows users with read-only access to shared OAuth credentials to replace them with their own tokens, enabling them to control workflows and potentially steal data.

A vulnerability in n8n workflow software allows SQL injection attacks when an attacker plants malicious files in a connected Git repository and an administrator imports them through the Source Control feature.

A security vulnerability in the n8n workflow software allows authenticated users with workflow permissions to bypass a previous security fix in the XML node and execute malicious code on the server.

Multiple integrations in Homepage can unintentionally access external APIs and retrieve their responses, potentially exposing sensitive data like passwords or API keys to unauthorized parties.

A vulnerability in the Homepage software allows unauthenticated users to check whether arbitrary files and directories exist on the server by exploiting different responses from an API endpoint.

A vulnerability in the Homepage software allows attackers to perform path traversal attacks on backend servers through an unsanitized parameter, potentially forwarding stored authentication credentials to unintended targets.

A vulnerability in Navidrome music server software allows attackers to log in as any user without knowing their password. This only works on freshly installed servers that have never been restarted, because a programming bug uses a predictable security key instead of generating a random one.

Navidrome, a music streaming software, has a parameter validation vulnerability that allows attackers to manipulate HTTP request parameters and impersonate other users, including administrators.

Navidrome, a music streaming software, has critical security flaws: URL parameters are unsafely inserted into SQL queries, allowing attackers to guess passwords, extract arbitrary database data, or log in with incorrect usernames.

Navidrome stores a critical authentication secret unencrypted in the database file, allowing attackers with file access to create forged user tokens and impersonate any user including administrators.

A vulnerability in Navidrome allows attackers to bypass authentication by using a non-existent username with an empty password hash. This grants unauthorized read-only access to server data such as playlists.

A permission flaw in Navidrome music server software allows regular users to access administrator-only transcoding configuration functions despite lacking administrative privileges.

A critical SQL injection vulnerability in the Navidrome music server software allows attackers to execute malicious database commands through the 'role' parameter of the API, potentially stealing or manipulating user data.

A vulnerability in the Navidrome music server software allows authenticated users to crash the server by sending excessively large image size parameters, causing uncontrolled memory consumption or disk space exhaustion.

A vulnerability in the Navidrome music server software allows attackers to inject malicious code through comment metadata in music files, which executes when viewing song information and can steal user credentials.

BookStack software allowed users to upload malicious PHP files through image upload functions, enabling them to execute arbitrary code on the server.

BookStack users with comment permissions could inject malicious HTML code and JavaScript into comments, which would then execute on other users' browsers. This enabled cross-site scripting attacks against other users of the platform.

BookStack exposes names of restricted books to unauthorized users when viewing shelves in list view, potentially revealing sensitive book titles to those without proper permissions.

BookStack users with page editing permissions could inject malicious JavaScript code through links or meta tags that executes when clicked or silently redirects users to other locations.

In the BookStack wiki software, users with page editing permissions can add malicious JavaScript links as attachments that execute when clicked by other users viewing the page.

A vulnerability in BookStack allows users with page editing permissions to make server-side requests and access files in BookStack storage through manipulated image URLs.

BookStack software accidentally displays names and preview content of supposedly hidden pages when all pages within a visible chapter were set to be invisible.

BookStack software has a vulnerability where users can view content from pages they shouldn't have access to through the plaintext export feature, bypassing permission restrictions.

Audiobookshelf contains security vulnerabilities that allow users with update permissions to read or delete arbitrary files and send HTTP requests to internal servers.

Audiobookshelf software version 2.6.0 contains a vulnerability that allows attackers without authentication to make the server send requests to arbitrary internal or external systems.

Audiobookshelf version 2.6.0 contains a vulnerability that allows attackers without authentication to make the server send requests to arbitrary internal or external addresses.

A security vulnerability in Audiobookshelf software allows malicious e-books to execute JavaScript code, which can lead to complete server takeover when viewed by privileged users.

A vulnerability in Audiobookshelf allows regular users without admin privileges to create libraries and write to arbitrary directories on the system due to a missing permission check.

A vulnerability in Audiobookshelf software allows attackers to bypass authentication using special URL parameters, leading to data leaks and complete server crashes.

A vulnerability in Audiobookshelf software allows cross-site scripting attacks through improper input handling in the upload endpoint, enabling attackers to inject malicious code into error messages and execute it in browsers.

A vulnerability in Audiobookshelf allows authenticated users with upload permissions to check the existence of arbitrary files on the server, even outside the permitted library folders.

A vulnerability in Audiobookshelf allows authenticated users with upload permissions to check for the existence of arbitrary files on the server through path manipulation, enabling filesystem reconnaissance.

A security vulnerability in Audiobookshelf software allows attackers to steal user tokens by sending malicious login links that trick the application into redirecting authentication tokens to attacker-controlled servers.

A vulnerability in the Audiobookshelf web application allows attackers with library access to inject malicious JavaScript code into book titles that executes when other users hover their mouse over the book cover.

A vulnerability in the Audiobookshelf mobile app allows attackers with library access to inject malicious code through manipulated titles or chapter names that executes when content is played, potentially stealing user data.

A vulnerability in the Audiobookshelf mobile app allows attackers with library access to inject malicious code into audiobook metadata that executes in other users' browsers, potentially stealing their session data and accessing device functions.

A security vulnerability in Audiobookshelf allows authenticated users to download files from libraries they shouldn't have access to by sending crafted download requests with foreign file IDs.

A security vulnerability in Audiobookshelf software allows authenticated users to view collections and book metadata from libraries they should not have access to, because the API endpoints fail to properly check library access permissions.

A vulnerability in Audiobookshelf allows authenticated users with upload permissions to check file existence outside their assigned library folders due to flawed string validation that fails to properly exclude sibling directories with similar names.

A vulnerability in Audiobookshelf software allows administrators to upload specially crafted ZIP files that consume excessive memory when decompressed, potentially crashing the server through memory exhaustion.

A security vulnerability in Audiobookshelf software allows administrators to inject malicious code into the login page that executes for all users and can capture their login credentials.

A vulnerability in Audiobookshelf allows signed-in users to inject malicious code into session data that executes when administrators visit the session overview, enabling attackers to gain admin privileges.

A path traversal vulnerability in Audiobookshelf software allows attackers to access files outside intended library folders during podcast creation, potentially enabling them to read, write, or delete unauthorized files.

Authelia authentication software fails to properly validate redirect URLs during logout, allowing attackers to redirect users to arbitrary malicious websites for phishing attacks.

A security vulnerability in Authelia allows attackers to bypass authentication by sending malformed HTTP requests to nginx servers using the ngx_http_auth_request_module.