2137 matches found
CVE-2025-61768
KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF Server-Side Request Forgery vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external imag...
GHSA-527M-2XHR-J27G LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Summary A Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure of sensitive internal services, reconnaissance of the internal network, or...
CVE-2025-61784
LLaMA-Factory's chat API contains SSRF and LFI in the _process_request function (src/llamafactory/api/chat.py). For image_url, video_url, and audio_url, if a URL is not a base64 data URI or local file path, the code fetches the URL with requests.get(url, stream=True).raw without validation, enabl...
EUVD-2019-6664
Malware in sbrugna...
EUVD-2021-26544
Malware in sbrugna...
EUVD-2021-10849
Malware in sbrugna...
EUVD-2021-20267
Malware in sbrugna...
EUVD-2020-16516
Malware in sbrugna...
EUVD-2020-5734
Malware in sbrugna...
EUVD-2018-3080
Malware in sbrugna...
EUVD-2019-17184
Malware in sbrugna...
EUVD-2017-14045
Malware in sbrugna...
EUVD-2020-17606
Malware in sbrugna...
EUVD-2021-1243
Malware in sbrugna...
EUVD-2020-23225
Malware in sbrugna...
EUVD-2019-0598
Malware in sbrugna...
EUVD-2017-8039
Malware in sbrugna...
EUVD-2018-14300
Malware in sbrugna...