Lucene search
+L

8664 matches found

Hacker One
Hacker One
added 2026/03/16 3:17 p.m.16 views

phpBB: Blind POST SSRF via Web Push Notification Endpoint

A vulnerability was discovered in phpBB 4.0.0-alpha1 that allowed registered users to register arbitrary URLs as their Web Push notification endpoint. The endpoint URL was stored without validation and later used by the phpBB server to send outbound HTTP POST requests, potentially leading to blin...

6AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/03/16 2:53 p.m.5 views

CVE-2026-2455

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows an attacker to perform SSRF attacks against internal services via IPv4-mapped IPv6 literals e.g., ::ffff:127.0.0.1.. Mattermost...

4.3CVSS5.8AI score0.00165EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/03/16 2:20 p.m.7 views

CVE-2026-4231

A vulnerability was found in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is the function updatesql/runsql of the file src/vanna/legacy/flask/init.py of the component Endpoint. Performing a manipulation results in server-side request forgery. The attack may be initiated remotely. Th...

7.5CVSS0.00278EPSS
SaveExploits0References4
NVD
NVD
added 2026/03/16 2:20 p.m.7 views

CVE-2026-4215

A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01. The impacted element is the function Save of the file core/src/main/java/com/flowci/core/config/service/ConfigServiceImpl.java of the component SMTP Host Handler. The manipulation results in server-side request forgery. The...

6.5CVSS0.00201EPSS
SaveExploits0References4
NVD
NVD
added 2026/03/16 2:18 p.m.9 views

CVE-2025-69239

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS0.00248EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/16 11:53 a.m.34 views

CVE-2025-69239 Server-Site Request Forgery in Raytha CMS

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS0.00248EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/16 11:53 a.m.9 views

CVE-2025-69239 Server-Site Request Forgery in Raytha CMS

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS5.8AI score0.00248EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/16 11:53 a.m.9 views

CVE-2025-69239

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS5.8AI score0.00248EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/16 11:53 a.m.12 views

CVE-2025-69239 Server-Site Request Forgery in Raytha CMS

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS5.9AI score
SaveExploits0References5
Snyk
Snyk
added 2026/03/16 10:48 a.m.5 views

Server-side Request Forgery (SSRF)

Overview vanna is a Generate SQL queries from natural language Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the runsql function. An attacker can access internal resources or services by sending crafted requests remotely. Remediation There is no fixed...

7.5CVSS7.2AI score0.00278EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/16 9:2 a.m.21 views

CVE-2026-4231

CVE-2026-4231 affects vanna-ai vanna up to 2.0.2 . The vulnerability is in the Endpoint component, specifically the function update_sql/run_sql in src/vanna/legacy/flask/init .py, allowing server-side request forgery . The attack can be performed remotely and the exploit has been made public. The...

7.5CVSS6.6AI score0.00278EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/03/16 9:2 a.m.4 views

CVE-2026-4231 vanna-ai vanna Endpoint __init__.py run_sql server-side request forgery

A vulnerability was found in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is the function updatesql/runsql of the file src/vanna/legacy/flask/init.py of the component Endpoint. Performing a manipulation results in server-side request forgery. The attack may be initiated remotely. Th...

7.5CVSS5.3AI score0.00278EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/16 4:32 a.m.4 views

CVE-2026-4215

A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01. The impacted element is the function Save of the file core/src/main/java/com/flowci/core/config/service/ConfigServiceImpl.java of the component SMTP Host Handler. The manipulation results in server-side request forgery. The...

6.5CVSS5.3AI score0.00201EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/03/16 4:32 a.m.38 views

CVE-2026-4215 FlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery

A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01. The impacted element is the function Save of the file core/src/main/java/com/flowci/core/config/service/ConfigServiceImpl.java of the component SMTP Host Handler. The manipulation results in server-side request forgery. The...

6.5CVSS0.00201EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/16 12:2 a.m.5 views

CVE-2026-4200

A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This affects the function uploadTestcaseZipUrl of the file business/business-oj/src/main/java/com/glowxq/oj/problem/controller/ProblemCaseController.java. Performing a manipulation results in...

7.5CVSS5.4AI score0.00294EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/03/16 12:2 a.m.5 views

CVE-2026-4200 glowxq glowxq-oj ProblemCaseController.java uploadTestcaseZipUrl server-side request forgery

A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This affects the function uploadTestcaseZipUrl of the file business/business-oj/src/main/java/com/glowxq/oj/problem/controller/ProblemCaseController.java. Performing a manipulation results in...

7.5CVSS6.7AI score0.00294EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/03/16 12:2 a.m.45 views

CVE-2026-4200 glowxq glowxq-oj ProblemCaseController.java uploadTestcaseZipUrl server-side request forgery

A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This affects the function uploadTestcaseZipUrl of the file business/business-oj/src/main/java/com/glowxq/oj/problem/controller/ProblemCaseController.java. Performing a manipulation results in...

7.5CVSS0.00294EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/03/16 12:0 a.m.13 views

TencentOS Server 3: idm:DL1 (TSSA-2025:1009)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:1009 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.6CVSS6.1AI score0.00522EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.17 views

PT-2026-25575

A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This affects the function uploadTestcaseZipUrl of the file business/business-oj/src/main/java/com/glowxq/oj/problem/controller/ProblemCaseController.java. Performing a manipulation results in...

7.5CVSS6.7AI score0.00294EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.13 views

glowxq-oj 代码问题漏洞

Glowxq-oj is an online problem-solving system developed by Glowxq’s individual developers, which supports multi-language evaluations and engaging programming activities. There are code vulnerabilities in Glowxq-oj. These vulnerabilities stem from incorrect operations on the function...

7.5CVSS7.2AI score0.00294EPSS
SaveExploits0References4
Rows per page
Query Builder