12057 matches found
Northern.tech Mender security vulnerability
Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. It is suitable for connected devices of any size. A security vulnerability exists in versions of Northern.tech Mender prior to 2024.07.11 that stems from the presence of a server-side request forgery...
CVE-2024-48951
Logpoint versions prior to 7.5.0 are vulnerable to a Server-Side Request Forgery (SSRF) within the SOAR component. This flaw can be exploited to leak the Logpoint API Token , potentially resulting in an authentication bypass . To remediate this issue, users should update to version 7.5.0 or later...
CVE-2024-20531 Cisco Identity Services Engine XML External Entity Injection Vulnerability
A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device and conduct a server-side request forgery SSRF attack through an affected device. To exploit this vulnerability, the attacker woul...
GHSA-3GF9-WV65-GWH9 gradio Server Side Request Forgery vulnerability
In gradio =4.42.0, the gr.DownloadButton function has a hidden server-side request forgery SSRF vulnerability. The reason is that within the saveurltocache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resourc...
CVE-2024-48052
In gradio =4.42.0, the gr.DownloadButton function has a hidden server-side request forgery SSRF vulnerability. The reason is that within the saveurltocache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resourc...
WordPress Responsive Filterable Portfolio Plugin <= 1.0.22 is vulnerable to Server Side Request Forgery (SSRF)
Software Responsive Filterable Portfolio Type Plugin Vulnerable versions = 1.0.22 Fixed in 1.0.23 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-51785 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID...
CVE-2024-48052
In gradio =4.42.0, the gr.DownloadButton function has a hidden server-side request forgery SSRF vulnerability. The reason is that within the saveurltocache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resourc...
CVE-2024-51665: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through = 1.2.1...
SmartAgent 1.1.0 Server-Side Request Forgery
Exploit Title: SmartAgent v1.1.0 - Server-Side Request Forgery SSRF Date: 01-10-2024 Exploit Author: Alter Prime Vendor Homepage: https://smarts-srlcom.com/, https://smartagent.com Version: Build v1.1.0 Tested on: Kali Linux An unauthenticated user can trigger the web server to perform web reques...
CVE-2024-48360
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...
Cisco Secure Firewall Management Center Server-Side Request Forgery Vulnerability
Cisco Secure Firewall Management Center is a powerful network security management tool from Cisco. Cisco Secure Firewall Management Center suffers from a server-side request forgery vulnerability that stems from improper validation of user-supplied data. An attacker could use this vulnerability t...
CVE-2024-48360
Qualitor version v8.24 and below is vulnerable to a Server-Side Request Forgery (SSRF) via the /request/viewValidacao.php component. This flaw allows unauthenticated attackers to force the server to make arbitrary requests, potentially leading to the enumeration of internal systems and ports. A p...
PT-2025-23515 · Hewlett Packard · Hpe Storeonce
Name of the Vulnerable Software and Affected Versions: HPE StoreOnce Software affected versions not specified Description: A server-side request forgery vulnerability exists in HPE StoreOnce Software. This issue allows for exploitation through specific API endpoints, although the exact endpoints...
CVE-2024-48360
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...
CVE-2024-51242
A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...
CVE-2024-51242
A Server-Side Request Forgery (SSRF) vulnerability exists in eladmin version 2.7 and earlier . The flaw is located in the ServerDeployController.java file, where the manipulation of the ip parameter within the HTTP Body allows for SSRF. Exploitation details are not provided in the documents, alth...
CVE-2024-51242
A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...
CVE-2024-48346
xtreme1 = v0.9.1 contains a Server-Side Request Forgery SSRF vulnerability in the /api/data/upload path. The vulnerability is triggered through the fileUrl parameter, which allows an attacker to make arbitrary requests to internal or external systems...
PT-2024-34570 · Eladmin · Eladmin
Name of the Vulnerable Software and Affected Versions: eladmin versions 2.7 and earlier Description: A Server-Side Request Forgery SSRF issue has been identified. The manipulation of the HTTP Body ip parameter leads to SSRF. This occurs in the ServerDeployController.java file. Recommendations: Fo...
CVE-2024-51242
A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...