CVE-2026-34590 Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validation

Postiz is an AI social media scheduling tool. Prior to version 2.21.4, the POST /webhooks/ endpoint for creating webhooks uses WebhooksDto which validates the url field with only @IsUrl format check, missing the @IsSafeWebhookUrl validator that blocks internal/private network addresses. The updat...

MAL-2025-34590 Malicious code in tbkgzmwqjfnpekoi (npm)

The package tbkgzmwqjfnpekoi was found to contain malicious code...

CVE-2024-34590

Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

CVE-2024-34590

CVE-2024-34590 affects librtp.so (pre-SMR Jul-2024 Release 1). The vulnerability stems from improper input validation when parsing an item type from RTCP SDES packets, enabling remote denial of service with user interaction required. Affected versions are librtp.so prior to SMR Jul-2024 Release 1...

CVE-2022-34590

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/admin.php...

CVE-2022-34590

Hospital Management System 1.0 is affected by a SQL injection via the editid parameter in /HMS/admin.php. Exploitation could allow an attacker to read data, modify data, and perform unauthorized administrative operations within the affected site, as described in the Nuclei template and CVE record...

CVE-2021-34590

creationtimestamp| type| source ---|---|--- 2022-04-27 20:13:18+00:00| seen| https://t.me/cibsecurity/41511...

CVE-2021-34590

CVE-2021-34590 affects Bender/ebee Charge Controllers. The issue is a Cross-site Scripting vulnerability where authenticated attackers can inject HTML code into configuration values, which are not properly escaped when displayed. Multiple sources confirm the vulnerability across several product l...

CVE-2021-34590 Bender Charge Controller: Cross-site Scripting

In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration values. These values are not properly escaped when displayed...

CVE-2025-34590

...

CVE-2025-34590

CVE-2025-34590 is rejected/not used and does not represent an active vulnerability entry.