openwisp-controller (>=0.2.0, <=0.3.1), openwisp-network-topology (>=0.1.0a0, <=0.2.2) +2 more potentially affected by CVE-2025-65430 via django-allauth (0.38.0)

django-allauth PYPI version 0.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - openwisp-controller =0.2.0, =0.1.0a0, =0.1.11, =0.1.0a0, =0.1.0 Source cves: CVE-2025-65430 Source advisory: OSV:GHSA-QHMC-3MVR-F2J...

openwisp-controller (>=0.2.0, <=0.3.1), openwisp-network-topology (>=0.1.0a0, <=0.2.2) +2 more potentially affected by CVE-2025-65431 via django-allauth (0.38.0)

django-allauth PYPI version 0.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - openwisp-controller =0.2.0, =0.1.0a0, =0.1.11, =0.1.0a0, =0.1.0 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P...

openwisp-controller (>=0.2.0, <=0.3.1), openwisp-network-topology (>=0.1.0a0, <=0.2.2) +2 more potentially affected by CVE-2025-65431 via django-allauth (0.38.0)

django-allauth PYPI version 0.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - openwisp-controller =0.2.0, =0.1.0a0, =0.1.11, =0.1.0a0, =0.1.0 Source cves: CVE-2025-65431 Source advisory: OSV:PYSEC-2025-111...

GHSA-R6J8-C6R2-37RR kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

EUVD-2025-203310

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

DMadmin code injection vulnerability

DMadmin is China vion707 open source a basic interface framework . DMadmin code injection vulnerability exists , the vulnerability stems from the file Admin/Controller/AddonsController.class.php in the Add function there is a cross-site scripting vulnerability can be exploited remotely...

PT-2025-51312

Name of the Vulnerable Software and Affected Versions vion707 DMadmin versions prior to 3403cafdb42537a648c30bf8cbc8148ec60437d1 Description A cross-site scripting issue exists in vion707 DMadmin. The issue is located in the Add function of the Admin/Controller/AddonsController.class.php file...

PT-2025-54719

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

CVE-2025-14710: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This affects an unknown part of the file /controller/api/OrderList.php. The manipulation of the argument telephone results in sql injection. The attack can be executed remotely. The exploit ...

Rockwell Automation’s various products have security vulnerabilities

The Rockwell Automation Micro820, among others, is a programmable controller from Rockwell Automation USA. A security vulnerability in several Rockwell Automation products, which stems from improper handling of malformed packets by the IPv6 stack, could cause the controller to enter a recoverable...

CVE-2025-14711: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability affects unknown code of the file /controller/api/hotelList.php. This manipulation of the argument pickedHotelName/type causes sql injection. The attack is possible to be carried...

AZL-72382 CVE-2025-13281 affecting package kubernetes for versions less than 1.30.10-18

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

AZL-72386 CVE-2025-13281 affecting package kubernetes for versions less than 1.28.4-21

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

DEBIAN-CVE-2025-13281

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

CVE-2025-13281

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the kube-controller-manager when using the in-tree Portworx StorageClass. An attacker can access sensitive information from unprotected endpoints within the control plane's host network, including...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the kube-controller-manager when using the in-tree Portworx StorageClass. An attacker can access sensitive information from unprotected endpoints within the control plane's host network, including...

CVE-2025-13281 Portworx Half-Blind SSRF in kube-controller-manager

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

CVE-2025-13281

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...