CVE-2025-29449: Server-Side Request Forgery (SSRF)

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function...

CVE-2025-29449

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function...

CVE-2025-29450

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component...

CVE-2025-29449

The open-source bookmark management program TwoNav version 2.1.18-20241105 is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists in the link identification function , where mishandling of input allows a remote attacker to obtain sensitive information . No exploit details are pro...

PT-2025-17231 · Twonav · Twonav

Name of the Vulnerable Software and Affected Versions: twonav version 2.1.18-20241105 Description: The issue allows a remote attacker to obtain sensitive information via the link identification function. Recommendations: For twonav version 2.1.18-20241105, at the moment, there is no information...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2024-34453

TwoNav version 2.1.13 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The issue stems from the url parameter in the API endpoint index.php?c=api&method=read_data&type=connectivity_test, which ultimately processes requests through /system/api.php. An attacker could exploit thi...

TwoNav 安全漏洞

TwoNav is an open source and free bookmark navigation management program from tznb1 open source. A security vulnerability exists in TwoNav version 2.1.13, which stems from a server-side request forgery vulnerability in the url parameter...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2024-34453: Server-Side Request Forgery (SSRF)

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

TwoNav 跨站脚本漏洞

TwoNav is an open source and free bookmark navigation management program by tznb1 open source. A cross-site scripting vulnerability exists in TwoNav version v2.0.28-20230624, which stems from a default setting that allows free registration, resulting in stored XSS...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

PT-2023-26062 · Twonav · Twonav

Name of the Vulnerable Software and Affected Versions: TwoNav version 2.0.28-20230624 Description: The issue is related to Cross Site Scripting XSS. Recommendations: For version 2.0.28-20230624, consider disabling any features that may facilitate XSS attacks until a patch is available. Restrict...