PT-2026-95783

Name of the Vulnerable Software and Affected Versions Wow Elements Addons for Elementor versions prior to 1.11.3 Description This issue is a Server-Side Request Forgery, a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. Authenticated...

PT-2026-95266

Name of the Vulnerable Software and Affected Versions Auto Upload Images versions prior to 3.3.3 Description This issue is a Limited Server-Side Request Forgery SSRF, a flaw that allows a server to be coerced into making requests to an unintended location. Authenticated attackers with...

CVE-2026-50188: Improper Neutralization of CRLF Sequences

Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites and plugins using the Kirby Http Remote class, including Remote::request, Remote::get, and Remote::post, to send outgoing HTTP requests with untrusted data in the headers option could allow newline characters...

EUVD-2023-24125

Malicious code in bioql PyPI...

PT-2020-21158

Name of the Vulnerable Software and Affected Versions harmlesspackage version 0.0.1 Description The issue concerns malicious code embedded in the postinstall script of the package. This script prints a message to the console and performs a GET request to a remote server. Recommendations Remove th...

CVE-2019-11897

A Server-Side Request Forgery SSRF vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to rea...

PT-2019-12543

Name of the Vulnerable Software and Affected Versions WaspThemes Visual CSS Style Editor plugin versions prior to 7.2.1 Description The issue allows for a CSRF attack, potentially granting admin access through the use of yp remote get. Recommendations For versions prior to 7.2.1, update to versio...

Telnet-Ftp Service Server 1.x - Multiple Vulnerabilities (Post Auth)

No description provided by source. / Telnet-Ftp Service Server v1.x ------------------------------ Multiple Vulnerability: -Remote Creat File -Remote Delet File -Remote Creat Directory -Remote Delet Directory -Remote Get File -Remote Crash...

Telnet-Ftp Service Server v1.x Multiple Vulnerabilities (post auth)

Exploit for unknown platform in category remote exploits =================================================================== Telnet-Ftp Service Server v1.x Multiple Vulnerabilities post auth =================================================================== / Telnet-Ftp Service Server v1.x...

Canon GP300 - Remote GET Denial of Service

source: https://www.securityfocus.com/bid/8121/info A problem in the Canon GP-300 has been reported in the handling of some types of malformed web requests. This issue could result in the denial of service to legitmate users of the print server. GET /...