Vulnerabilities and Security Researches

Vulnerabilities and security researches forlocal-magic local-magic

Direction: descending

Apr 19, 2025

Local Magic # CVE-2025-32636

CVE, Research URL: CVE-2025-32636
Home page URL: Security reports for Local Magic
Application: Local Magic
Date: Apr 17, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in matthewrubin Local Magic allows SQL Injection. This issue affects Local Magic: from n/a through 2.6.0.
Affected versions: max 2.6.0.
Status: vulnerable

Apr 05, 2025

Local Magic # CVE-2025-31858

CVE, Research URL: CVE-2025-31858
Home page URL: Security reports for Local Magic
Application: Local Magic
Date: Apr 03, 2025
Research Description: Missing Authorization vulnerability in matthewrubin Local Magic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Local Magic: from n/a through 2.6.0.
Affected versions: max 2.6.0.
Status: vulnerable