netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-26fm-jh3j-2ww5
GHSA-44qx-v2f9-7rq9
GHSA-773x-pxjg-gxgx
GHSA-84x2-p8rx-5q4g
GHSA-92ww-86qp-x82q
GHSA-pw25-rj5h-xh7p
This commit is contained in:
advisory-database[bot]
2025-05-30 03:32:06 +00:00
parent b498d52c6f
commit ad061df9be
6 changed files with 185 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/05/GHSA-26fm-jh3j-2ww5/GHSA-26fm-jh3j-2ww5.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79",
"CWE-80"
],
"severity": "MODERATE",
advisories/unreviewed/2025/05/GHSA-44qx-v2f9-7rq9/GHSA-44qx-v2f9-7rq9.json
+45
View File
@@ -0,0 +1,45 @@
{
"schema_version": "1.4.0",
"id": "GHSA-44qx-v2f9-7rq9",
"modified": "2025-05-30T03:30:31Z",
"published": "2025-05-30T03:30:31Z",
"aliases": [
"CVE-2020-36846"
],
"details": "A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36846"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
},
{
"type": "WEB",
"url": "https://github.com/google/brotli/pull/826"
},
{
"type": "WEB",
"url": "https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-5v8v-66v8-mwm7"
},
{
"type": "WEB",
"url": "https://github.com/timlegge/perl-IO-Compress-Brotli/blob/8b44c83b23bb4658179e1494af4b725a1bc476bc/Changes#L52"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-30T01:15:20Z"
}
}
advisories/unreviewed/2025/05/GHSA-773x-pxjg-gxgx/GHSA-773x-pxjg-gxgx.json
+48
View File
@@ -0,0 +1,48 @@
{
"schema_version": "1.4.0",
"id": "GHSA-773x-pxjg-gxgx",
"modified": "2025-05-30T03:30:32Z",
"published": "2025-05-30T03:30:32Z",
"aliases": [
"CVE-2025-48757"
],
"details": "An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48757"
},
{
"type": "WEB",
"url": "https://docs.lovable.dev/changelog"
},
{
"type": "WEB",
"url": "https://gist.github.com/lhchavez/625ee42a6c408a850d35e50f8e649de9"
},
{
"type": "WEB",
"url": "https://mattpalmer.io/posts/CVE-2025-48757"
},
{
"type": "WEB",
"url": "https://x.com/danialasaria/status/1911862269996118272"
}
],
"database_specific": {
"cwe_ids": [
"CWE-863"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-30T03:15:20Z"
}
}
advisories/unreviewed/2025/05/GHSA-84x2-p8rx-5q4g/GHSA-84x2-p8rx-5q4g.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-84x2-p8rx-5q4g",
"modified": "2025-05-30T03:30:32Z",
"published": "2025-05-30T03:30:32Z",
"aliases": [
"CVE-2025-44619"
],
"details": "Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44619"
},
{
"type": "WEB",
"url": "http://tinxy.com"
},
{
"type": "WEB",
"url": "http://wifi.com"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-30T03:15:20Z"
}
}
advisories/unreviewed/2025/05/GHSA-92ww-86qp-x82q/GHSA-92ww-86qp-x82q.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-92ww-86qp-x82q",
"modified": "2025-05-30T03:30:31Z",
"published": "2025-05-30T03:30:31Z",
"aliases": [
"CVE-2025-44614"
],
"details": "Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44614"
},
{
"type": "WEB",
"url": "https://github.com/ShravanSinghRathore/Tinxy/wiki/1.-WiFi-Lock-Controller-v1-RF-%281%E2%80%909%29"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-30T03:15:20Z"
}
}
advisories/unreviewed/2025/05/GHSA-pw25-rj5h-xh7p/GHSA-pw25-rj5h-xh7p.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pw25-rj5h-xh7p",
"modified": "2025-05-30T03:30:31Z",
"published": "2025-05-30T03:30:31Z",
"aliases": [
"CVE-2025-44612"
],
"details": "Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44612"
},
{
"type": "WEB",
"url": "https://github.com/ShravanSinghRathore/Tinxy/wiki/1.-WiFi-Lock-Controller-v1-RF-%281%E2%80%909%29"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-30T03:15:20Z"
}
}