Lucene search
+L

3 matches found

OSV
OSV
added 2024/01/30 8:57 p.m.102 views

GHSA-67M4-QXP3-J6HH TrueLayer.Client SSRF when fetching payment or payment provider

Impact The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet could be made which could lead to informatio...

8.6CVSS7.6AI score0.00532EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2024/01/30 8:57 p.m.40 views

TrueLayer.Client SSRF when fetching payment or payment provider

Impact The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet could be made which could lead to informatio...

8.6CVSS6.7AI score0.00532EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2007/10/12 9:17 p.m.29 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 encopyrite.php, 2 vicopyrite.php, and 3 arcopyrite.php in language/ directories; 4 classaccess.php, 5 classdepartment.php, 6...

7.5CVSS7.9AI score0.07116EPSS
SaveExploits3References13Affected Software1
Rows per page
Query Builder