Lucene search
+L

167 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2016-6617

Malware in sbrugna...

7.5CVSS7.6AI score0.01871EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-3031

Malware in sbrugna...

9.1CVSS9.3AI score0.01501EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2020-30801

Malware in sbrugna...

9.5CVSS6.2AI score0.00828EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2015-1010

Malware in sbrugna...

8.2CVSS8.3AI score0.01832EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2024-28064

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00397EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/26 2:48 p.m.10 views

CVE-2020-36851

Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services,...

9.5CVSS6.5AI score0.00828EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/25 3:30 p.m.12 views

GHSA-R3JV-XFGX-GJ24 cors-anywhere vulnerable to server-side request forgery

Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services...

9.5CVSS6.6AI score0.00828EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2025/09/25 3:30 p.m.14 views

cors-anywhere vulnerable to server-side request forgery

Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services...

9.5CVSS8.5AI score0.00828EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2025/09/25 3:16 p.m.9 views

CVE-2020-36851

Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services...

9.5CVSS6.4AI score0.00828EPSS
SaveExploits0References6
CVE
CVE
added 2025/09/25 2:45 p.m.32 views

CVE-2020-36851

CVE-2020-36851 affects cors-anywhere/server-side proxy configurations that run as an open proxy. The issue allows unauthenticated external users to induce the proxy to make HTTP requests to arbitrary targets (SSRF) because the proxy forwards requests and headers, enabling access to internal endpo...

9.5CVSS6.5AI score0.00828EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2025/09/25 2:45 p.m.16 views

CVE-2020-36851

Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services,...

9.5CVSS6.5AI score0.00828EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/09/25 12:00 a.m.11 views

cors-anywhere 安全漏洞

cors-anywhere is a NodeJS reverse proxy by Rob Wu, a personal developer. A security vulnerability exists in cors-anywhere that stems from allowing an unauthenticated external user when configured as an open proxy to trick the server into making HTTP requests to arbitrary targets, which could lead...

9.5CVSS6.7AI score0.00828EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 11:38 a.m.16 views

CVE-2016-0796

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, including open proxy and security bypass vulnerabilities because it fails to properly verify user-supplied input. An attacker may leverage these issues to hide attacks directed at a...

7.5CVSS7AI score0.01279EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2024/10/26 12:00 a.m.16 views

Fortinet FortiWeb Confused deputy issue on SERVER_NAME causes open proxy flaw (FG-IR-21-123)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-123 advisory. - A unintended proxy or intermediary 'confused deputy' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows a...

6.5CVSS6.5AI score0.00807EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/25 3:15 p.m.16 views

CVE-2024-30128

HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask their original source IP address. This may enable an attacker to trick the user into exposing sensitive information...

8.6CVSS0.00397EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/25 3:15 p.m.12 views

CVE-2024-30128

HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask their original source IP address. This may enable an attacker to trick the user into exposing sensitive information...

6.5CVSS5.8AI score0.00397EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/25 2:42 p.m.53 views

CVE-2024-30128

The vulnerability affects the HCL Nomad server on Domino . It is an open proxy flaw that allows an unauthenticated attacker to mask their original source IP address, potentially deceiving users into exposing sensitive information. Product/vendor/version details in the connected PT-2024-23201 entr...

8.6CVSS8.6AI score0.00397EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/09/25 2:42 p.m.29 views

CVE-2024-30128 An open proxy vulnerability affects HCL Nomad server on Domino

HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask their original source IP address. This may enable an attacker to trick the user into exposing sensitive information...

8.6CVSS0.00397EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/09/25 2:42 p.m.10 views

CVE-2024-30128 An open proxy vulnerability affects HCL Nomad server on Domino

HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask their original source IP address. This may enable an attacker to trick the user into exposing sensitive information...

8.6CVSS6.8AI score0.00397EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/25 12:00 a.m.14 views

PT-2024-23201 · Hcl · Hcl Nomad Server

Name of the Vulnerable Software and Affected Versions: HCL Nomad server on Domino versions up to 1.0.12 Description: The HCL Nomad server on Domino is affected by an open proxy vulnerability, allowing an unauthenticated attacker to mask their original source IP address. This may enable an attacke...

8.6CVSS7.1AI score0.00397EPSS
SaveExploits0References9
Rows per page
Query Builder