CVE-2025-28096

OneNav version 1.1.0 , a bookmark management tool, is vulnerable to Server-Side Request Forgery (SSRF) due to an issue in custom headers . This flaw could allow an attacker to force the server to make requests to arbitrary domains, potentially resulting in unauthorized access to sensitive data or...

CVE-2025-28093

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) within the Email Settings feature. The root cause is the insufficient validation of user-supplied URLs , which allows an attacker to manipulate the server into making arbitrary requests to internal or external resources. This could...

CVE-2025-28092

The ShopXO e-commerce system (version v6.4.0 ) is vulnerable to Server-Side Request Forgery (SSRF) within its image upload function . The root cause is the insufficient validation of user-supplied URLs , which allows an attacker to craft requests that the server executes on their behalf. While th...

CVE-2025-28091

The maccms10 content management system, specifically version v2025.1000.4047 , is susceptible to a Server-Side Request Forgery (SSRF) vulnerability. The flaw is triggered through the Add Article feature. This vulnerability allows an attacker to potentially induce the server to make requests to un...

CVE-2025-28089

The open-source PHP + MYSQL website building system maccms10 version v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) . The flaw originates within the Scheduled Task function , which could allow an attacker to make unauthorized requests from the server. As a mitigation, it is r...

CVE-2025-28091

maccms10 v2025.1000.4047 has a Server-Side Request Forgery SSRF vulnerability via Add Article...

CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

PT-2025-13582 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. This vulnerability can be exploited via the Add Article feature. Recommendations: For maccms10 version 2025.1000.4047, as a...

PT-2025-13587 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to Server-Side Request Forgery SSRF in the Collection Custom Interface feature. This allows an attacker to trick the server into making unintended requests. Recommendations: Fo...

CVE-2025-28089

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF via the Scheduled Task function...

CVE-2025-28092

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF via image upload function...

CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

PT-2025-13581 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to Server-Side Request Forgery SSRF via the Scheduled Task function. Recommendations: For version 2025.1000.4047, consider disabling the Scheduled Task function until a patch i...

CVE-2025-28092

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF via image upload function...

CVE-2025-28091

maccms10 v2025.1000.4047 has a Server-Side Request Forgery SSRF vulnerability via Add Article...

CVE-2025-28090

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF in the Collection Custom Interface feature...

CVE-2025-28092

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF via image upload function...

CVE-2025-28090

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF in the Collection Custom Interface feature...

CVE-2025-31076: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Server Side Request Forgery.This issue affects WP Compress for MainWP: from n/a through = 6.30.03...

PT-2025-13522 · W3Css · W3Css Validator

Name of the Vulnerable Software and Affected Versions: W3CSS Validator versions before cssval-20250226 Description: The issue is related to an XXE XML External Entity attack in the W3CSS Validator, which allows an attacker to use specially-crafted XML objects to coerce server-side request forgery...