Cokebeer

The issue concerns Dragonfly, an open-source P2P-based file distribution and image acceleration system. It uses JWT to verify users, but the secret key for JWT is hardcoded, leading to authentication bypass. An attacker can perform any action as a user with admin privileges.

The issue concerns an authenticated SQL injection vulnerability in the URL monitoring feature.

Name of the Vulnerable Software and Affected Versions: Spring Cloud Data Flow (affected versions not specified) Description: The issue is related to improper sanitization for upload paths in the Skipper server, allowing a malicious user with access to the server API to write arbitrary files to any location on the file system. This could potentially compromise the server. The vulnerability is associated with unlimited file uploads of dangerous types, which can be exploited by a remote attacker to write arbitrary files. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue concerns the CORS Filter feature in go-zero, which allows users to specify an array of domains allowed in the CORS policy. However, the `isOriginAllowed` function uses `strings.HasSuffix` to check the origin, leading to a bypass via a malicious domain. This can break CORS policy, allowing any page to make requests and retrieve data on behalf of other users.

Hertzbeat is an open-source, real-time monitoring system that uses aviatorscript to evaluate alert expressions. Due to improper sanitization for alert expressions, a malicious user can use a crafted alert expression to execute any command on the Hertzbeat server. This issue allows a malicious user with access to the alert define function to execute any command in the Hertzbeat instance.

Play With Docker is a browser-based Docker playground. The issue arises from incorrect CORS configuration, allowing an attacker to bypass the CORS policy by setting the origin header in an HTTP request to a malicious domain, such as `evil-play-with-docker.com`, which would then be echoed in the response header, successfully retrieving basic user information.

The issue is a ZipSlip problem that occurs when using the fsutil package to unzip files. This can lead to path traversal when users use `zip.Unzip` to unzip zip files from a malicious attacker.

The issue concerns a hard-coded JWT key `PanIndex` used in PanIndex. This allows an attacker to sign a JWT token and perform actions with admin privileges.

The issue is a ZipSlip problem that occurs when using the fileutil package to unzip files. This can be exploited when using the `fileutil` package. No information is provided about the estimated number of potentially affected devices or real-world incidents.