Vulnerabilities and security researches forlocal-magic local-magic
Direction: ascendingApr 05, 2025
Local Magic # CVE-2025-31858
- CVE, Research URL
- Home page URL
- Application
- Date
- Apr 03, 2025
- Research Description
- Missing Authorization vulnerability in matthewrubin Local Magic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Local Magic: from n/a through 2.6.0.
- Affected versions
-
max 2.6.0.
- Status
-
vulnerable
Apr 19, 2025
Local Magic # CVE-2025-32636
- CVE, Research URL
- Home page URL
- Application
- Date
- Apr 17, 2025
- Research Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in matthewrubin Local Magic allows SQL Injection. This issue affects Local Magic: from n/a through 2.6.0.
- Affected versions
-
max 2.6.0.
- Status
-
vulnerable