11726 matches found
WordPress Ninja Forms Webhooks plugin <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook vulnerability
Authenticated Admin+ Server-Side Request Forgery via Form Webhook vulnerability discovered by Francesco Carlucci in WordPress Plugin Ninja Forms Webhooks versions = 3.0.7...
Medium: pcs
Issue Overview: Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host XFH header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrar...
CVE-2025-45887
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...
CVE-2025-29972
Server-Side Request Forgery SSRF in Azure allows an authorized attacker to perform spoofing over a network...
CVE-2025-47483
Server-Side Request Forgery SSRF vulnerability in Iulia Cazan Easy Replace Image easy-replace-image allows Server Side Request Forgery.This issue affects Easy Replace Image: from n/a through = 3.5.0...
CVE-2025-47548
Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...
CVE-2025-47464
Server-Side Request Forgery SSRF vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from n/a through = 1.3.1...
CVE-2025-47664
Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...
CVE-2025-47484
Server-Side Request Forgery SSRF vulnerability in Oliver Campion Display Remote Posts Block display-remote-posts-block allows Server Side Request Forgery.This issue affects Display Remote Posts Block: from n/a through = 1.1.0...
CVE-2025-45887
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...
CVE-2025-45887
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...
CVE-2025-45887
Yifang CMS version 2.0.2 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the /api/file/getRemoteContent API endpoint. This flaw allows an attacker to forge requests from the server to arbitrary destinations, which could result in unauthorized access or data exposure . A...
PT-2025-20558
Name of the Vulnerable Software and Affected Versions Yifang CMS version 2.0.2 Description The issue is related to Server-Side Request Forgery SSRF in the "/api/file/getRemoteContent" API endpoint. This allows an attacker to forge requests from the server to an arbitrary destination, potentially...
CVE-2025-45887
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...
CVE-2025-47733
Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...
CVE-2025-29972
Server-side request forgery ssrf in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network...
Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM Java: Two OpenJ9 internal ASCII to EBCDIC string wrapper has vulnerabilities on z/OS (CVE-2025-1470, CVE-2025-1471)
Summary IBM WebSphere Application Server is vulnerable to server-side request forgery. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Test Management, IBM Engineering Lifecycle Optimization -...
Azure Storage Resource Provider Spoofing Vulnerability
Server-side request forgery ssrf in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network...