EUVD-2025-210582

better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger open redirects to steal sensitive tokens for account...

CVE-2026-46417 Angular: SSRF via Hostname Hijacking in @angular/platform-server

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server. The issue stems from how...

CVE-2025-32355

Rocket TRUfusion Enterprise (versions through 7.10.4.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) . The issue stems from a misconfigured reverse proxy that handles incoming connections, allowing an attacker to specify absolute URLs within the HTTP request line. This causes the proxy ...

Squid Code Injection Vulnerability

Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A code injection vulnerability exists in the clientside.cc file in Squid versions prior to 3.5.1...