Browse all 3 CVE security advisories affecting coder426. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Coder426 primarily develops web applications and APIs, with a core focus on functionality over security. Their history reveals a pattern of vulnerabilities, particularly remote code execution (RCE) and cross-site scripting (XSS), often stemming from insufficient input validation. While no major public incidents have been documented, their three CVEs demonstrate consistent security gaps in authentication and privilege escalation mechanisms. The vulnerabilities typically arise from improper error handling and lack of secure coding practices, suggesting a need for improved security awareness and implementation of defensive coding standards throughout their development lifecycle.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-12614 | Passwords Manager <= 1.4.8 - Missing Authorization to Authenticated (Subscriber+) Add Password + Update Encryption Key — Passwords Manager CWE-89 | 7.5 | High | 2025-01-16 |
| CVE-2024-12613 | Passwords Manager <= 1.4.8 - Unauthenticated SQL Injection — Passwords Manager CWE-89 | 7.5 | High | 2025-01-16 |
| CVE-2024-12615 | Passwords Manager <= 1.4.8 - Authenticated (Subscriber+) SQL Injection — Passwords Manager CWE-89 | 6.5 | Medium | 2025-01-16 |
This page lists every published CVE security advisory associated with coder426. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.