CVE-2024-8806

creationtimestamp| type| source ---|---|--- 2026-06-21 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mornpcbldq2a...

Server-side Request Forgery (SSRF)

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /v1/mcp/test/connection endpoint. An attacker can perform server-side request forgery SSRF by supplying a crafted tokenurl and...

CVE-2026-12813: Server-Side Request Forgery (SSRF)

A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processors/file.ts of the component File URL Handler. The manipulation results in server-side request forgery. The attack can be...

PT-2026-51258

Name of the Vulnerable Software and Affected Versions kortix-ai suna versions prior to 0.8.39 Description A weakness in the Auth Endpoint component allows for remote cross-site scripting XSS, which is a technique where malicious scripts are injected into trusted websites. The issue exists within...

CVE-2026-56228

creationtimestamp| type| source ---|---|--- 2026-06-20 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqq2ovth22l...

CVE-2026-77111

creationtimestamp| type| source ---|---|--- 2026-06-20 20:32:39+00:00| seen| https://gist.github.com/elbakouchisamira61-bit/5d6b526ef00d36ec0158cd86cca2f16e 2026-09-11 19:18:21+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mvbbtcnejy2d 2026-09-12 01:37:07+00:00| seen|...

CVE-2026-56330

creationtimestamp| type| source ---|---|--- 2026-06-20 20:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqp2fi5lq22 2026-06-21 13:11:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116788263084343961...

CVE-2026-56342

creationtimestamp| type| source ---|---|--- 2026-06-20 20:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqoozz66m22...

CVE-2026-56304

creationtimestamp| type| source ---|---|--- 2026-06-20 20:19:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqok5jmtt2f...

CVE-2026-56282

creationtimestamp| type| source ---|---|--- 2026-06-20 20:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqo23tp4i2w...

CVE-2025-71379

creationtimestamp| type| source ---|---|--- 2026-06-20 20:04:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqnpdswz622...

CVE-2026-56332

creationtimestamp| type| source ---|---|--- 2026-06-20 19:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqn5gwuvf2w...

CVE-2026-56276

creationtimestamp| type| source ---|---|--- 2026-06-20 19:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqmuihsev2i...

CVE-2026-56342

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...

CVE-2026-56342 AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...

CVE-2026-56342 AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...

CVE-2019-25763

creationtimestamp| type| source ---|---|--- 2026-06-20 15:59:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moq7z4l7zk2b...

CVE-2026-56332 Capgo - Open Redirect via confirmation_url Parameter

Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to redirect users to arbitrary external websites. The confirmationurl parameter is not validated, enabling attackers to craft malicious links for phishing and credential harvesting...

CVE-2026-56227

Capgo before 12.128.2 is affected by a server-side request forgery (SSRF) in webhook URL validation. The flaw permits configuring webhooks to loopback or internal addresses (e.g., localhost/127.0.0.1). When triggered, the backend makes outbound requests to those addresses, and error responses are...

CVE-2026-56227

Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopback and internal addresses. Organization admins can configure webhooks pointing to localhost or 127.0.0.1, and when triggered, the backend performs outbound requests to these...