Lucene search
+L

9249 matches found

Cvelist
Cvelist
•added 2026/04/08 8:30 a.m.•46 views

CVE-2026-39464 WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request Forgery.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through = 6.19.8...

5.5CVSS0.00255EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/04/08 5:27 a.m.•145 views

H4C-WEB

H4C-WEB !/bin/bash =======================================...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/04/08 4:12 a.m.•164 views

Exploit for CVE-2026-27739

-CVE-2026-27739-poc curl -H "X-Forwarded-For: http://169.254...

9.2CVSS8.4AI score0.00527EPSS
SaveExploits1
Veracode
Veracode
•added 2026/04/08 3:28 a.m.•17 views

Server-Side Request Forgery (SSRF)

github.com/charmbracelet/soft-serve is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to lack of validation in webhook URLs, which allows an attacker to create malicious webhooks that target internal services, private networks, and cloud metadata endpoints...

9.1CVSS8.1AI score0.00368EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2026/04/08 12:12 a.m.•25 views

EUVD-2026-19915

FastFeedParser has an infinite redirect loop DoS via meta-refresh chain...

7.5CVSS5.8AI score0.00498EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/04/08 12:08 a.m.•9 views

Server-side Request Forgery (SSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the downloadURL parameter processing in objects/aVideoEncoder.json.php. An attacker can access internal resources and exfiltrat...

7.1CVSS5.8AI score0.00338EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/08 12:08 a.m.•22 views

EUVD-2026-19881

WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal services...

6.5CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/08 12:08 a.m.•11 views

Server-side Request Forgery (SSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the restreamerURL parameter of the restream log callback flow. An attacker can access internal network resources and retrieve...

7.1CVSS5.9AI score0.00344EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•36 views

PT-2026-31330

Name of the Vulnerable Software and Affected Versions mirror-registry affected versions not specified Description An issue exists in mirror-registry where authenticated users can exploit the log export feature by providing a specially crafted web address URL. This allows the application's backend...

6.5CVSS5.9AI score0.00405EPSS
SaveExploits0References27
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•25 views

Red Hat OpenShift Mirror Registry 代码问题漏洞

Red Hat OpenShift Mirror Registry is a lightweight container image repository service provided by Red Hat Corporation. There are code-related vulnerabilities in Red Hat OpenShift Mirror Registry. These vulnerabilities allow authenticated users to utilize the log export feature to provide custom...

6.5CVSS5.9AI score0.00405EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•21 views

WordPress plugin GlobalPayments WooCommerce 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.4CVSS5.9AI score0.00217EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/08 12:00 a.m.•28 views

CVE-2026-31017

A Server-Side Request Forgery SSRF vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficiently sanitized before being rendered into PDF. When generating PDFs from user-controlled HTML content, the application...

6.1AI score0.00416EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•22 views

QD 安全漏洞

QD is a task scheduling and automatic execution tool developed by QD OpenSource. There is a security vulnerability in QD 20230821, which stems from a specially crafted request and may lead to server-side request forgery...

9.1CVSS5.9AI score0.00241EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/08 12:00 a.m.•41 views

CVE-2023-46945

QD 20230821 is vulnerable to Server-side request forgery SSRF via a crafted request...

0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•23 views

PT-2026-31328

Name of the Vulnerable Software and Affected Versions QD 20230821 affected versions not specified Description QD 20230821 is susceptible to a Server-side request forgery SSRF condition. This occurs when a crafted request is processed, allowing for potential unauthorized access or actions on...

9.1CVSS5.8AI score0.00241EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•18 views

PT-2026-31142

CVE-2026-39521 Server-Side Request Forgery SSRF vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: fr… https://t.co/owRzyY4kbX...

5.8AI score0.00188EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•18 views

WordPress plugin Podigee 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

5.4CVSS5.9AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•24 views

WordPress plugin Coming Soon Page, Under Construction & Maintenance Mode by SeedProd 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.5CVSS5.9AI score0.00255EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•22 views

WordPress plugin Visual Link Preview 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6CVSS5.9AI score0.00205EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•19 views

PT-2026-31209

Server-Side Request Forgery SSRF vulnerability in Global Payments GlobalPayments WooCommerce global-payments-woocommerce allows Server Side Request Forgery.This issue affects GlobalPayments WooCommerce: from n/a through = 1.18.0...

5.9AI score0.00217EPSS
SaveExploits0References3
Rows per page
Query Builder