Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

coollabsio — Vulnerabilities & Security Advisories 75

Browse all 75 CVE security advisories affecting coollabsio. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Coollabs.io operates as a comprehensive platform for managing and monetizing content creator communities, primarily through its proprietary software, All in One SEO. This infrastructure handles sensitive user data, payment processing, and extensive content management workflows, making it a significant target for automated scanning and exploitation. Historical vulnerability records indicate a prevalence of cross-site scripting (XSS) and SQL injection flaws, stemming from complex input validation requirements across its diverse modules. Additionally, the platform has faced instances of remote code execution and privilege escalation vulnerabilities, often linked to outdated dependencies or misconfigured server environments. While no catastrophic data breaches have been publicly confirmed, the accumulation of twenty-five Common Vulnerabilities and Exposures highlights ongoing challenges in maintaining rigorous security hygiene. These findings underscore the critical need for continuous patch management and secure coding practices within large-scale community management ecosystems to mitigate risks associated with high-traffic web applications.

Found 75 results / 75 Clear Filters
Top products by coollabsio: coolify
CVE ID Title CVSS Severity Published
CVE-2025-59156 Coolify has Docker Compose Injection issue — coolify CWE-78 9.9 - 2026-01-05
CVE-2025-66213 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Path — coolify CWE-78 9.9AI Critical AI 2025-12-23
CVE-2025-66212 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filename — coolify CWE-78 8.8AI High AI 2025-12-23
CVE-2025-66211 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename — coolify CWE-78 8.8AI High AI 2025-12-23
CVE-2025-66210 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Import — coolify CWE-78 8.8AI High AI 2025-12-23
CVE-2025-66209 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup — coolify CWE-78 10.0 Critical 2025-12-23
CVE-2025-24025 Coolify Vulnerable to Reflected XSS on Tag Search — coolify CWE-116 5.4 - 2025-01-24
CVE-2025-22612 Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE) — coolify CWE-200 10.0 Critical 2025-01-24
CVE-2025-22611 Coolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE) — coolify CWE-862 10.0 Critical 2025-01-24
CVE-2025-22610 Coolify Vulnerable to OAuth Secrets Leak — coolify CWE-862 7.1 - 2025-01-24
CVE-2025-22609 Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE) — coolify CWE-862 10.0 Critical 2025-01-24
CVE-2025-22608 Coolify Vulnerable to Revocation of Arbitrary Team Invitations (DOS) — coolify CWE-639 6.5 Medium 2025-01-24
CVE-2025-22607 Coolify Vulnerable to GitHub / GitLab OAuth Secrets Leak — coolify CWE-200 6.5 - 2025-01-24
CVE-2025-22606 Coolify Command Injection Vulnerability in Project Name — coolify CWE-78 8.8 - 2025-01-24
CVE-2025-22605 Coolify OS Command Injection Vulnerability in SSH Command Generation — coolify CWE-78 9.9 - 2025-01-24

This page lists every published CVE security advisory associated with coollabsio. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.