WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)

Software Motors – Car Dealer & Classified Ads Type Plugin Vulnerable versions = 1.4.6 Fixed in 1.4.7 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-46207 Patch priority Low CVSS severity Low 4.1 Developer Claim ownership PSID 2e86ea9d7329 Credits Mika...

Server-Side Request Forgery (SSRF)

vrite is vulnerable to Server-Side Request Forgery SSRF. This vulnerability allows a remote attacker to make unauthorized requests to internal servers on the target system...

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

This is a PoC exploit for CVE-2023-27163, a remote code executio...

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

This is a PoC exploit for CVE-2023-27163, a remote code executio...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Adminer vulnerabilities (USN-5271-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5271-1 advisory. It was discovered that Adminer did not escape data in the history parameter of the default URI. A remote attacker could possibly...

2023 OWASP Top-10 Series: Wrap Up

Over the past several months, we've taken a journey through the new 2023 OWASP API Security Top-10 list. In the previous 12 weekly posts, we've delved into each category, discussed what it is, how it's exploited, why it matters, and suggested effective protections for each. Now, as we conclude th...

Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

GHSA-W35P-WXWJ-RCM9 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572

CVE-2023-5572 describes a Server-Side Request Forgery (SSRF) vulnerability in the GitHub repository vriteio/vrite, affecting versions prior to 0.3.0. The issue arises in the vrite project and is tracked across multiple feeds (NVD, CVE lists, GHSA, osv, etc.). The standard references indicate the ...

GHSA-8JXC-5F94-22VH Magento Open Source allows Server-Side Request Forgery (SSRF)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

Magento Open Source allows Server-Side Request Forgery (SSRF)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

Server side request forgery (ssrf)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

CVE-2023-26366 Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

CVE-2023-26366 Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

Adobe Commerce Code Issues Vulnerabilities

Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A code issue vulnerability previously existed in Adobe Commerce version 2.4.7, which stems from being affected by a server-side request forgery SSRF vulnerability that could lead to arbitrary file...

PT-2023-32185 · Vriteio · Vrite

Name of the Vulnerable Software and Affected Versions: vriteio/vrite versions prior to 0.3.0 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository vriteio/vrite. SSRF is a type of attack where an attacker can trick a server into making requests to internal...

Webedition CMS 2.9.8.8 Server-Side Request Forgery

Exploit Title: Webedition CMS v2.9.8.8 - Blind SSRF Application: Webedition CMS Version: v2.9.8.8 Bugs: Blind SSRF Technology: PHP Vendor URL: https://www.webedition.org/ Software Link: https://download.webedition.org/releases/OnlineInstaller.tgz?p=1 Date of found: 07.09.2023 Author: Mirabbas...