CVE-2025-52362

PHProxy is affected by a Server-Side Request Forgery (SSRF) vulnerability in the URL processing functionality up to version 1.1.1. The issue arises from insufficient input validation of the _proxurl parameter, enabling a remote, unauthenticated attacker to submit a crafted URL. Severity is indica...

CVE-2025-36845

CVE-2025-36845 affects Eveo URVE Web Manager 27.02.2025. A server-side request forgery exists in /_internal/redirect.php due to improper validation of the URL input, enabling the app server to request internal endpoints and reflect content in the response. The Nuclei template confirms the SSRF pa...

CVE-2025-36845

An issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /internal/redirect.php allows for Server-Side Request Forgery SSRF. The endpoint takes a URL as input, sends a request to this address, and reflects the content in the response. This can be used to request endpoints only...

PT-2025-30326

Name of the Vulnerable Software and Affected Versions Eveo URVE Web Manager version 27.02.2025 Description An issue exists in Eveo URVE Web Manager that allows for Server-Side Request Forgery SSRF. The / internal/redirect.php endpoint accepts a URL as input, sends a request to this address, and...

CVE-2025-36845

An issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /internal/redirect.php allows for Server-Side Request Forgery SSRF. The endpoint takes a URL as input, sends a request to this address, and reflects the content in the response. This can be used to request endpoints only...

PT-2025-30343

Name of the Vulnerable Software and Affected Versions Manager-io/Manager versions up to and including 25.7.18.2519 Description Manager-io/Manager is accounting software with a critical unauthenticated Server-Side Request Forgery SSRF vulnerability identified in the proxy handler component. This...

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

Debian dla-4243 : libbatik-java - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4243 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4243-1 [email protected]...

[SECURITY] [DLA 4243-1] batik security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4243-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk July 20, 2025 https://wiki.debian.org/LTS -...

CVE-2025-46385

CWE-918 Server-Side Request Forgery SSRF...

CVE-2025-7787

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. It is possible to launch...

CVE-2025-46385

CVE-2025-46385 affects Emby Server (Windows) with a Server-Side Request Forgery (SSRF) flaw. Root cause: the server does not authenticate the origin of requests, enabling potential SSRF. CVSS v3.1 base score 8.6 (HIGH) with high integrity impact; no explicit fix/version is provided in the connect...

CVE-2025-46385

CWE-918 Server-Side Request Forgery SSRF...

CVE-2025-46385

CWE-918 Server-Side Request Forgery SSRF...

CVE-2025-52163

A Server-Side Request Forgery SSRF in the component TunnelServlet of agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 allows attackers to forcefully initiate connections to arbitrary internal and external resources via a crafted request. This can lead to sensitive data exposure...

PT-2025-30201 · Unknown · Enterprise Web Applications

Name of the Vulnerable Software and Affected Versions: Enterprise Web Applications affected versions not specified Description: The software contains a Server-Side Request Forgery SSRF flaw. This issue allows an attacker to potentially make requests on behalf of the server, potentially accessing...

CVE-2025-7759

A vulnerability was identified in thinkgem JeeSite up to 5.12.0. This vulnerability affects unknown code of the file modules/core/src/main/java/com/jeesite/common/ueditor/ActionEnter.java of the component UEditor Image Grabber. Such manipulation of the argument Source leads to server-side request...

CVE-2025-52163

A Server-Side Request Forgery SSRF in the component TunnelServlet of agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 allows attackers to forcefully initiate connections to arbitrary internal and external resources via a crafted request. This can lead to sensitive data exposure...

CVE-2025-20288

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP...

CVE-2025-7787

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. It is possible to launch...