Vulnerabilities
6 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2025-11607 | A weakness has been identified in harry0703 MoneyPrinterTurbo up to 1.2.6. A weakness has been identified in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function upload_music of the file app/controllers/v1/music.py of the component API Endpoint. Executing a manipulation of the argument File can lead to path traversal. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. NVD description · AI analysis pending | 2.1 | <1% |
| — | ||
| CVE-2025-49089 +1 in the same advisory: …10472 | wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd. wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd. NVD description · AI analysis pending | 6.3 group max | <1% |
| — | ||
| CVE-2025-7897 | A vulnerability was found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. A vulnerability was found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this issue is the function verify_token of the file app/controllers/base.py of the component API Endpoint. The manipulation leads to missing authentication. The attack may be launched remotely. NVD description · AI analysis pending | 6.9 group max | <1% |
| — |