CVE-2023-38624

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38626

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38624

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38625

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-52331

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2023-38627

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38626

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38624

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38624

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central that stems from an authenticated server-side request forgery SSRF vulnerability. It could allow an attacker to interact directly with internal or local services...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. Trend Micro Apex Central 2019 has a security vulnerability that stems from an authenticated server-side request forgery SSRF vulnerability. An attacker exploits the vulnerability to interact directly with internal or local services...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. Trend Micro Apex Central 2019 has a security vulnerability that stems from an authenticated server-side request forgery SSRF vulnerability. It may allow an attacker to interact directly with internal or local services...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. Trend Micro Apex Central 2019 has a security vulnerability that stems from an authenticated server-side request forgery SSRF vulnerability. It may allow an attacker to interact directly with internal or local services...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. Trend Micro Apex Central 2019 has a security vulnerability that stems from an authenticated server-side request forgery SSRF vulnerability. It may allow an attacker to interact directly with internal or local services...

Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery

Description The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.6. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

CVE-2023-3744 Server-Side Request Forgery in SLiMS

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

CVE-2023-3744

CVE-2023-3744 is a Server-Side Request Forgery in SLims 9.6.0. An authenticated attacker can send requests to internal services or upload files via the imageURL parameter in the scrape_image.php endpoint, enabling potential access to internal resources. Public details consistently describe SSRF i...

SLims Code Issue Vulnerability

Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A code issue vulnerability exists in SLims version 9.6.0, which stems from a...

PT-2023-25969 · Slims · Slims

Name of the Vulnerable Software and Affected Versions: SLims version 9.6.0 Description: The issue allows an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape image.php" file in the imageURL parameter. This is a Server-Side Reques...

Server side request forgery (ssrf)

The Dropbox Folder Share plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.9.7 via the 'link' parameter. This can allow unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to...