11992 matches found
Azure Health Bot Elevation of Privilege Vulnerability
An authenticated attacker can exploit an Server-Side Request Forgery SSRF vulnerability in Microsoft Azure Health Bot to elevate privileges over a network...
CVE-2025-2997 zhangyanbo2007 youkefu url server-side request forgery
A vulnerability was found in zhangyanbo2007 youkefu 4.2.0. It has been classified as critical. Affected is an unknown function of the file /res/url. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-2997
CVE-2025-2997 affects youkefu 4.2.0 (zhangyanbo2007). The vulnerability is triggered by manipulation of the url argument in the /res/url function, leading to server-side request forgery. The issue is exploitable remotely and has been disclosed publicly. The connected documents confirm the root ca...
CVE-2025-2997 zhangyanbo2007 youkefu url server-side request forgery
A vulnerability was found in zhangyanbo2007 youkefu 4.2.0. It has been classified as critical. Affected is an unknown function of the file /res/url. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-31527
Server-Side Request Forgery SSRF vulnerability in Kishan WP Link Preview wp-link-preview allows Server Side Request Forgery.This issue affects WP Link Preview: from n/a through = 1.4.1...
CVE-2025-31527
CVE-2025-31527 is a Server-Side Request Forgery (SSRF) vulnerability affecting the WordPress plugin WP Link Preview . The provided documents indicate the flaw impacts versions from unspecified baseline up to and including 1.4.1. The vulnerability is cataloged with CVSS v3.1 metrics showing a base...
CVE-2025-31527 WordPress WP Link Preview plugin <= 1.4.1 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Kishan WP Link Preview allows Server Side Request Forgery. This issue affects WP Link Preview: from n/a through 1.4.1...
5 Impactful AWS Vulnerabilities You're Responsible For
If you're using AWS, it's easy to assume your cloud security is handled - but that's a dangerous misconception. AWS secures its own infrastructure, but security within a cloud environment remains the customer's responsibility. Think of AWS security like protecting a building: AWS provides strong...
WordPress Pipe Audio Video and Screen Recorder 1.0.6 Bypass / LFI / SSRF
WordPress Pipe Audio Video and Screen Recorder plugin version 1.0.6 suffers from webhook signature bypass, denial of service, local file inclusion, and server-side request forgery vulnerabilities. Exploit Title: WordPress Pipe Audio Video and Screen Recorder 1.0.6 - Multiple Vulnerabilities Date:...
CVE-2025-31527: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in Kishan WP Link Preview wp-link-preview allows Server Side Request Forgery.This issue affects WP Link Preview: from n/a through = 1.4.1...
PT-2025-14011 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft Azure Health Bot affected versions not specified Microsoft SharePoint Server affected versions not specified Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. An authenticated attacker can exploi...
WordPress plugin WP Link Preview has a code issue vulnerability.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
PT-2025-13772
Name of the Vulnerable Software and Affected Versions zhangyanbo2007 youkefu version 4.2.0 Description A critical issue was found, affecting an unknown function of the file /res/url. The manipulation of the url argument leads to server-side request forgery. This issue can be exploited remotely...
CVE-2025-31076
Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Server Side Request Forgery.This issue affects WP Compress for MainWP: from n/a through = 6.30.03...
CVE-2025-28093
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...
CVE-2025-28091
maccms10 v2025.1000.4047 has a Server-Side Request Forgery SSRF vulnerability via Add Article...
CVE-2025-28092
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF via image upload function...
CVE-2025-28096
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...