GPT Academic Server-Side Request Forgery Vulnerability

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a server-side request forgery vulnerability that can be exploited by an attacker to cause an application to access any URL, including internal services, and...

dify 代码问题漏洞

dify is an open source LLM application development platform from LangGenius Open Source. A code issue vulnerability exists in version 0.10.1 of dify, which stems from an unvalidated URL and could lead to a server-side request forgery attack...

Proofpoint Enterprise Protection 安全漏洞

Proofpoint Enterprise Protection is an application from Proofpoint USA, Inc. It provides the ability to protect e-mail. A security vulnerability in Proofpoint Enterprise Protection versions prior to 8.21.0 patch 5115, prior to 8.20.6 patch 5114, and prior to 8.18.6 patch 5113, which stems from...

MAL-2025-191688 Malicious code in axonify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

The vulnerability of the PHP programming language interpreter, related to a numerical truncation error, allows attackers to redirect users to any arbitrary URL address or cause a service failure.

The vulnerability of the PHP programming language interpreter is related to a numerical truncation error. Exploiting this vulnerability can allow an attacker to redirect a user to any desired URL address or cause a service failure...

The vulnerability of Microprogramming Software in the Wiren Board controller, related to access control errors, allows a intruder to execute arbitrary commands.

The vulnerability of Microprogramming software for Wiren Boards, related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafted URL command remotely...

CVE-2025-27662

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Password in URL OVE-20230524-0005...

WordPress plugin Staff Directory Plugin: Company Directory 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress plugin Staff Directory Plugin: A cross-site...

The vulnerability of the SSO (Single Sign-On) service of the Teamcenter lifecycle management system allows a hacker to redirect a user to any given URL address.

The vulnerability of the SSO Single Sign-On service of the Teamcenter lifecycle management system is related to the redirection of the URL to an unreliable website when accessing the login page. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An input validation error vulnerability exists in Mozilla Firefox versions prior to 136, which stems from URL spoofing...

zz 代码问题漏洞

zz is an e-commerce platform for zj1983 individual developers. A code issue vulnerability exists in zz 2024-8 and prior versions, which stems from improper handling of the url parameter in the HTTP request handling component, leading to server-side request forgery...

USN-7272-1 symfony vulnerabilities

Soner Sayakci discovered that Symfony incorrectly handled cookie storage in the web cache. An attacker could possibly use this issue to obtain sensitive information and access unauthorized resources. CVE-2022-24894 Marco Squarcina discovered that Symfony incorrectly handled the storage of user...

The vulnerability of Microsoft Edge relates to the redirection of URLs to unreliable websites when loading the login page, allowing attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Edge relates to the redirection of URLs to unreliable websites when loading the login page. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...

Liman MYS 输入验证错误漏洞

Liman MYS is a port center management system from Liman MYS open source. An input validation error vulnerability exists in versions of Liman MYS prior to 2.1.1-1010 that stems from not properly validating URL input. An attacker could exploit the vulnerability to redirect users to a malicious site...

NETGEAR DGN2200 安全漏洞

The NETGEAR DGN2200 is a wireless router from NETGEAR. The NETGEAR DGN2200 is vulnerable to a privilege issue. An attacker can exploit the vulnerability by adding "?x=1.gif" to the requested URL to be recognized as authenticated...

SUSE CVE-2024-5458

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, due to a code logic error, filtering functions such as filtervar when validating URLs FILTERVALIDATEURL for certain types of URLs the function will result in invalid user information username + password part of URLs being...

SUSE CVE-2025-1244

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

Outback Power Mojave Inverter 信息泄露漏洞

The Outback Power Mojave Inverter is an AC inverter from Outback Power. An information disclosure vulnerability exists in the Outback Power Mojave Inverter that stems from the possibility that an attacker could modify the URL to discover sensitive information about the target network...

Audiobookshelf 安全漏洞

Audiobookshelf is a self-hosted audiobook and podcast server open-sourced by Audiobookshelf. Audiobookshelf has a security vulnerability that stems from a flaw in the authentication bypass logic that allows unauthenticated requests to match certain unanchored regular expression patterns in URLs...

Astra Linux – Vulnerability in Firefox, Thunderbird

A crafted URL containing Arabic script and whitespace characters could potentially hide the true origin of the page, leading to a potential spoofing attack. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...