CVE-2025-45872

zrlog v3.1.5 was discovered to contain a Server-Side Request Forgery SSRF via the downloadUrl parameter...

ZrLog security vulnerabilities

ZrLog is a blogging system developed in Java language by xiaochun individual developer. A security vulnerability exists in ZrLog version 3.1.5, which is caused by a server-side request forgery in the downloadUrl parameter...

CVE-2025-45872: Server-Side Request Forgery (SSRF)

zrlog v3.1.5 was discovered to contain a Server-Side Request Forgery SSRF via the downloadUrl parameter...

CVE-2024-7743

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attac...

CVE-2024-7743

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attac...

CVE-2024-7743: Server-Side Request Forgery (SSRF)

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attac...

PT-2024-13827

Name of the Vulnerable Software and Affected Versions WWBN AVideo dev master commit 15fed957fb Description An information disclosure issue exists in the aVideoEncoderReceiveImage.json.php image upload functionality. A specially crafted HTTP request can lead to arbitrary file read. This issue is...

PT-2024-13828

Name of the Vulnerable Software and Affected Versions WWBN AVideo dev master commit 15fed957fb Description An information disclosure issue exists in the aVideoEncoderReceiveImage.json.php image upload functionality. A specially crafted HTTP request can lead to arbitrary file read. This issue is...

Google Chrome UnescapeURLWithOffsetsImpl() Function BiDi控制符未转义URL混淆漏洞

CVE ID:CVE-2014-1723 Google Chrome是一款流行的WEB浏览器。 Google Chrome UnescapeURLWithOffsetsImpl函数net/base/escape.cc处理URL中未转义BiDi控制符时，允许攻击者利用漏洞构建恶意WEB页，诱使用户解析，可导致URL混淆。 0 Google Chrome 33.0.1750.154 Google Chrome 33.0.1750.152 Google Chrome 34.0.1847.116版本已修复该漏洞，建议用户下载使用： https://www.google.com/chrome/...

Haihaisoft PDF Reader OCX Control v1.1.2.0 Remote Buffer Overflow

Exploit for windows platform in category dos / poc ================================================================= Haihaisoft PDF Reader OCX Control v1.1.2.0 Remote Buffer Overflow ================================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1...

CVE-2004-0586: Undefined Security Weakness

acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the 1 DownLoadURL, 2 SaveFilePath, and 3 Download ActiveX methods...