Server-side Request Forgery (SSRF)

Overview @angular/ssr is a the Angular server side rendering utilities. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the createRequestUrl function. An attacker can cause the server to make arbitrary HTTP requests to external domains by supplying a...

CVE-2025-59146

Summary: CVE-2025-59146 targets the “New API” SSRF in versions before 0.9.0.5. An authenticated user can submit a URL for the server to fetch, with improper validation allowing server-side requests to arbitrary internal or external destinations. The issue is fixed in 0.9.0.5, which adds a default...

EUVD-2016-2765

Malware in sbrugna...

EUVD-2019-8134

Malware in sbrugna...

EUVD-2016-10293

Malware in sbrugna...

EUVD-2023-32721

Malicious code in bioql PyPI...

EUVD-2022-1761

Malicious code in bioql PyPI...

EUVD-2022-31057

Malicious code in bioql PyPI...

EUVD-2022-34782

Malicious code in bioql PyPI...

EUVD-2022-42492

Malicious code in bioql PyPI...

EUVD-2022-43648

Malicious code in bioql PyPI...

EUVD-2023-32722

Malicious code in bioql PyPI...

EUVD-2022-52904

Malicious code in bioql PyPI...

EUVD-2024-41710

Malicious code in bioql PyPI...

EUVD-2024-54198

Malicious code in bioql PyPI...

EUVD-2022-3889

Malicious code in bioql PyPI...

EUVD-2021-8787

Malicious code in bioql PyPI...

EUVD-2023-58205

Malicious code in bioql PyPI...

CVE-2025-10137 Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery

The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...

Linux Distros Unpatched Vulnerability : CVE-2023-5933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input...