EUVD-2016-6935

Malware in sbrugna...

EUVD-2016-8847

Malware in sbrugna...

EUVD-2017-3657

Malware in sbrugna...

EUVD-2017-7305

Malware in sbrugna...

EUVD-2020-0606

Malware in sbrugna...

EUVD-2017-0339

Malware in sbrugna...

EUVD-2017-5223

Malware in sbrugna...

EUVD-2020-5013

Malware in sbrugna...

EUVD-2018-0609

Malware in sbrugna...

EUVD-2016-2472

Malware in sbrugna...

EUVD-2019-5495

Malware in sbrugna...

EUVD-2021-27371

Malware in sbrugna...

EUVD-2014-9126

Malware in sbrugna...

EUVD-2016-5371

Malware in sbrugna...

CVE-2025-61768 Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload

KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF Server-Side Request Forgery vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external imag...

CVE-2025-61768

KUNO CMS prior to 1.3.15 is affected by an SSRF in the Media module via uploading specially crafted SVGs with external image references. A logged‑in administrator can trigger an outgoing connection to an arbitrary URL, enabling information disclosure or internal network probing. The issue is fixe...

PT-2025-40951

Name of the Vulnerable Software and Affected Versions KUNO CMS versions prior to 1.3.15 Description KUNO CMS is a full-stack blog application. A Server-Side Request Forgery SSRF issue exists in the Media module of the administrative panel. An administrator can upload a specially crafted SVG file...

vulnerable-node-app

This is an educational sandbox demonstrating common web applicat...

CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...

CVE-2025-10695

Two unauthenticated diagnostic endpoints in OpenSupports 4.11.0 allow arbitrary backend-initiated connections to an attacker-controlled destination, enabling unauthenticated SSRF for internal network scanning and service interaction. Affected product/version: OpenSupports 4.11.0. Root cause: endp...