WordPress plugin IndieBlocks: code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2025-15704

Name of the Vulnerable Software and Affected Versions: DNN formerly DotNetNuke versions prior to 9.13.8 Description: A bypass has been identified for a previously known vulnerability, allowing unauthenticated attackers to execute arbitrary GET requests against target systems, including internal o...

WordPress plugin PowerPress Podcasting code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress plugin SEO Help: Code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

DNN code issues and vulnerabilities

DNN also known as DotNetNuke is a set of American DNN company by Microsoft support, based on the ASP.NET platform of open source content management system CMS. The system is easy to install, scalable and feature-rich. DNN suffers from a code issue vulnerability that stems from bypassing known...

WordPress plugin Waymark: code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

AIAS code-related vulnerabilities

AIAS is an AI one-stop solution from Calvin Personal Developers. AIAS version 20250308 suffers from a code issue vulnerability that stems from the fact that incorrect manipulation of the parameter url can lead to server-side request forgery...

PT-2025-15357 · Unknown · Mymagicpower Aias

Name of the Vulnerable Software and Affected Versions: mymagicpower AIAS 20250308 Description: A critical issue was found in mymagicpower AIAS, affecting an unknown function of the file 2 training platform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The...

AIAS code-related vulnerabilities

AIAS is an AI one-stop solution from Calvin Personal Developers. AIAS version 20250308 suffers from a code issue vulnerability that stems from the fact that incorrect manipulation of the parameter url can lead to server-side request forgery...

Zammad security vulnerabilities

Zammad is a suite of ticket management software from the German company Zammad. A security vulnerability exists in Zammad versions prior to 6.4.2, which stems from a server-side request forgery that could result in a GET request in the local network...

PT-2025-14873 · Bitdefender · Bitdefender Gravityzone Console

Name of the Vulnerable Software and Affected Versions: Bitdefender GravityZone Console versions prior to 6.41.2.1 Description: A server-side request forgery SSRF issue allows an attacker to bypass input validation logic using leading characters in DNS requests. This could potentially be used for...

Browsershot security vulnerabilities

Browsershot is an open source tool from Spatie. It is used to convert web pages into images or pdfs. Browsershot version 0.0.0 there is a security vulnerability , the vulnerability stems from the setUrl function lack of input restrictions , which may lead to server-side request forgery...

Bitdefender GravityZone Console code-related vulnerabilities

Bitdefender GravityZone Console is a centralized cybersecurity management platform from Bitdefender Romania, designed to provide organizations with full visibility and control over their security infrastructure. A code issue vulnerability exists in Bitdefender GravityZone Console versions prior t...

WordPress plugin WP Optin Wheel code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress plugin ElementsCSS Addons for Elementor: Code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

Server-side Request Forgery (SSRF)

Overview mobsf is a Mobile Security Framework MobSF is an automated, all-in-one mobile application Android/iOS/Windows pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Affected versions of this package are vulnerable to Server-side...

CVE-2025-2997

A vulnerability was found in zhangyanbo2007 youkefu 4.2.0. It has been classified as critical. Affected is an unknown function of the file /res/url. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been...

OpenEMR code-related vulnerabilities

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A code issue vulnerability exists in versions prior to OpenEMR 7.0.3.1 that stems...

Mobile Security Framework code-related vulnerabilities

Mobile Security Framework MobSF is an automated all-in-one mobile application open source by Mobile Security Framework. Used for penetration testing, malware analysis and security assessments, it is capable of performing both static and dynamic analysis. A code issue vulnerability exists in Mobil...

Youkefu code issue vulnerabilities

youkefu is a customer service support application by the individual developer zhangyanbo2007. A code issue vulnerability exists in youkefu version 4.2.0, which stems from an incorrect manipulation of the parameter url that can lead to server-side request forgery...