EUVD-2020-24832

Malware in sbrugna...

EUVD-2010-4380

Malware in sbrugna...

EUVD-2014-2178

Malware in sbrugna...

EUVD-2019-14003

Malware in sbrugna...

EUVD-2009-4057

Malware in sbrugna...

EUVD-2018-11511

Malware in sbrugna...

EUVD-2015-2141

Malware in sbrugna...

EUVD-2024-16199

Malicious code in bioql PyPI...

EUVD-2022-32361

Malicious code in bioql PyPI...

EUVD-2024-44173

Malicious code in bioql PyPI...

EUVD-2024-21241

Malicious code in bioql PyPI...

EUVD-2023-58628

Malicious code in bioql PyPI...

EUVD-2023-2851

Malicious code in bioql PyPI...

EUVD-2023-58828

Malicious code in bioql PyPI...

The vulnerability of the GitFlic platform, related to the lack of authentication, allows a malicious user to execute arbitrary HTTP requests on behalf of the server.

The vulnerability of the GitFlic platform’s code-related functionality lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary HTTP requests on behalf of the server...

CVE-2025-9269

A Server-Side Request Forgery SSRF vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerabili...

Server-side Request Forgery (SSRF)

Overview johnbillion/wp-crontrol is a package that allows you to take control of the cron events on your WordPress website. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the wpremoterequest function. An attacker can send arbitrary HTTP requests from the...

CVE-2025-41376: Improper Neutralization of CRLF Sequences

CRLF Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via '/index.php/survey/index/sid/ /token/fwyfw%0d%0aCookie:%20POC'...

CVE-2025-54381 BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP...

CVE-2025-34051 AVTECH DVR Devices Server-Side Request Forgery

A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the /cgi-bin/nobody/Search.cgi?action=cgiquery endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str parameters to make arbitrary HTTP requests...