CVE-2025-48962

Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 Windows, Linux before build 39938...

Exploit for Open Redirect in Grafana

CVE-2025-4123 - Grafana Path Traversal Exploit Developed by...

Server-Side Request Forgery (SSRF)

mcp-markdownify-server is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper input validation due to the Markdownify.get function allowing attacker-controlled URLs to be fetched and their responses read via conversion tools like webpage-to-markdown,...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager CVE-2025-27907)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

PT-2025-23805 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions prior to build 39938 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which can lead to sensitive information disclosure. Recommendations: For Acronis Cyber Protect 16...

CVE-2025-5510

A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has be...

CVE-2025-5510 quequnlong shiyi-blog optimize server-side request forgery

A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has be...

CVE-2025-5510

CVE-2025-5510 affects quequnlong shiyi-blog (versions up to 1.2.1). The issue is a server-side request forgery in unknown code at /app/sys/article/optimize triggered by manipulating the url parameter. Exploitation is remote and has been disclosed publicly; vendor did not respond. Remediation guid...

CVE-2025-5510 quequnlong shiyi-blog optimize server-side request forgery

A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has be...

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

CVE-2023-27163 PoC Exploit Code This Python script is a Proof...

PT-2025-23643 · Unknown · Quequnlong Shiyi-Blog

Name of the Vulnerable Software and Affected Versions: quequnlong shiyi-blog versions up to 1.2.1 Description: A critical issue was found in the unknown code of the file /app/sys/article/optimize. The manipulation of the url argument leads to server-side request forgery. The attack can be initiat...

CVE-2024-7073

A server-side request forgery SSRF vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the networ...

CVE-2024-7073 Unauthenticated Server-Side Request Forgery (SSRF) in Multiple WSO2 Products via SOAP Admin Services

A server-side request forgery SSRF vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the networ...

CVE-2024-7073

CVE-2024-7073 describes a server-side request forgery (SSRF) in multiple WSO2 products caused by improper input validation in the SOAP admin/management services. The vulnerability allows unauthenticated attackers to trigger server-side requests to internal or external resources reachable by the a...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

A server-side request forgery vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

CVE-2025-37090 describes a server-side request forgery in HPE StoreOnce Software . Public sources confirm the affected product and vulnerability class (SSRF) with a high CVSS3.1 base score (9.8) and network attack vector, no user interaction required. The available connected documents do not spec...

Hewlett Packard Enterprise StoreOnce VSA determineInclusionAndExtract Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Hewlett Packard Enterprise StoreOnce VSA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the...

PT-2025-23538

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A server-side request forgery SSRF issue exists due to improper input validation in SOAP admin services. This allows unauthenticated attackers to manipulate server-side requests, enabli...