Lucene search
+L

168 matches found

NVD
NVD
•added 2026/03/22 1:16 a.m.•10 views

CVE-2019-25586

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash...

6.9CVSS0.00178EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2026/03/22 12:11 a.m.•33 views

CVE-2019-25586

Removed by vendor...

6.9CVSS5.9AI score0.00178EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/03/22 12:11 a.m.•45 views

CVE-2019-25586 Deluge 1.3.15 Denial of Service via URL Field

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash...

6.9CVSS0.00178EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/22 12:00 a.m.•0 views

CVE-2019-25586: Return of Pointer Value Outside of Expected Range

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash...

6.9CVSS6AI score0.00178EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/21 3:27 a.m.•6 views

CVE-2026-2351

The Task Manager plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.0.2 via the callbackgettextfromurl function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on th...

6.5CVSS5.9AI score0.00252EPSS
SaveExploits0References5
CVE
CVE
•added 2026/03/20 12:00 a.m.•26 views

CVE-2026-30580

File Thingie version 2.5.7 is vulnerable to a Directory Traversal vulnerability. The root cause is the improper handling of the "create folder from url" functionality within the application. A malicious user can exploit this flaw to read arbitrary files on the target system. No specific remediati...

5.9AI score0.00636EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/20 12:00 a.m.•11 views

PT-2026-26650

CVE-2026-30580 File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary… https://t.co/olkBtQ0mG8...

5.8AI score0.00636EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/20 12:00 a.m.•0 views

CVE-2026-30580: Improper Limitation of a Pathname to a Restricted Directory

File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the target system...

4.3CVSS5.9AI score0.00636EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/20 12:00 a.m.•5 views

CVE-2026-30580

File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the target system...

5.9AI score0.00636EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/17 6:16 p.m.•14 views

CVE-2026-25534

Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver. However, they missed that Java URL objects do not correctly handle underscores on parsing. This led to a bypass of the previous CVE CVE-2025-61916 through the use of carefully...

9.1CVSS0.00405EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•0 views

CVE-2025-69239: Server-Side Request Forgery (SSRF)

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS5.8AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/09 9:16 p.m.•25 views

CVE-2026-25960

vLLM is an inference and serving engine for large language models LLMs. The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in the loadfromurlasync method due to inconsistent URL parsing behavior between the validation layer and the actual HTTP client. The SSRF fix uses...

9.8CVSS0.00718EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2026/03/09 7:55 p.m.•25 views

vLLM has SSRF Protection Bypass

Summary The SSRF protection fix for https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc can be bypassed in the loadfromurlasync method due to inconsistent URL parsing behavior between the validation layer and the actual HTTP client. Affected Component - File:...

9.8CVSS5.9AI score0.00718EPSS
SaveExploits1References13Affected Software1
OSV
OSV
•added 2026/01/28 4:14 p.m.•8 views

GHSA-QH4C-XF7M-GXFC vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector

Summary A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods obtain and process media from URLs provided by users, using different Python parsing libraries when restrictin...

7.1CVSS6.1AI score0.00718EPSS
SaveExploits2References20
EUVD
EUVD
•added 2026/01/28 5:30 a.m.•14 views

EUVD-2026-4865

The Easy Replace Image plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.5.2. This is due to missing capability checks on the imagereplacementfromurl function that is hooked to the erifromurl AJAX action. This makes it possible for authenticated...

5.3CVSS5.9AI score0.00264EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•43 views

PT-2026-5061

The Easy Replace Image plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.5.2. This is due to missing capability checks on the image replacement from url function that is hooked to the eri from url AJAX action. This makes it possible for...

5.3CVSS5.9AI score0.00264EPSS
SaveExploits0References5
NVD
NVD
•added 2026/01/27 10:15 p.m.•18 views

CVE-2026-24779

vLLM is an inference and serving engine for large language models LLMs. Prior to version 0.14.1, a Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods obtain and process...

7.1CVSS0.00588EPSS
SaveExploits1References15
OSV
OSV
•added 2026/01/22 6:16 p.m.•20 views

CVE-2025-56590

An issue was discovered in the InsertFromURL function of the Apryse HTML2PDF SDK thru 11.10. This vulnerability could allow an attacker to execute arbitrary operating system commands on the local server...

9.8CVSS6AI score0.00543EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/01/22 12:00 a.m.•8 views

CVE-2025-56590

An issue was discovered in the InsertFromURL function of the Apryse HTML2PDF SDK thru 11.10. This vulnerability could allow an attacker to execute arbitrary operating system commands on the local server...

9.8CVSS5.9AI score0.00543EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•28 views

PT-2026-3990

Name of the Vulnerable Software and Affected Versions Apryse HTML2PDF SDK versions through 11.10 Description A flaw exists in the InsertFromURL function that may allow an attacker to execute arbitrary operating system commands on the local server. Recommendations Update to a version beyond 11.10...

9.8CVSS5.8AI score0.00543EPSS
SaveExploits1References6
Rows per page
Query Builder