Lucene search
+L

35729 matches found

Cvelist
Cvelist
added 2026/08/12 2:40 p.m.32 views

CVE-2026-73432 Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup

Vulnerability-Lookup contains a server-side request forgery SSRF vulnerability in the remote-instance synchronization functionality. Remote instance addresses were validated only for basic URL syntax before being stored, while the synchronization worker later dereferenced these addresses using...

5.1CVSS0.00242EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/12 2:40 p.m.6 views

CVE-2026-73432 Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup

Vulnerability-Lookup contains a server-side request forgery SSRF vulnerability in the remote-instance synchronization functionality. Remote instance addresses were validated only for basic URL syntax before being stored, while the synchronization worker later dereferenced these addresses using...

5.1CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/12 2:40 p.m.9 views

EUVD-2026-57231

Vulnerability-Lookup contains a server-side request forgery SSRF vulnerability in the remote-instance synchronization functionality. Remote instance addresses were validated only for basic URL syntax before being stored, while the synchronization worker later dereferenced these addresses using...

5.1CVSS5.7AI score0.00242EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 2:40 p.m.33 views

CVE-2026-73432

CVE-2026-73432 affects Vulnerability-Lookup: SSRF via remote-instance synchronization where addresses were only validated for syntax before storage and later dereferenced with requests.get(), following redirects without network-boundary checks. An authenticated admin (admin:access) can configure ...

5.1CVSS5.7AI score0.00242EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 2:30 p.m.59 views

CVE-2026-73264

Prowler (cloud security platform) contains an SSRF risk prior to version 5.33.1. An authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_compatible provider via POST /api/v1/lighthouse/providers and POST /api/v1/lighthouse/providers/...

7.6CVSS5.4AI score0.00319EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/08/12 2:14 p.m.11 views

CVE-2026-73262

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resourcetags, assembled by unrolldict and parsehtmlstring, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned...

5.4CVSS5.3AI score0.00215EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/08/12 2:14 p.m.9 views

EUVD-2026-57222

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resourcetags, assembled by unrolldict and parsehtmlstring, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned...

5.4CVSS5.3AI score0.00215EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/12 2:14 p.m.31 views

CVE-2026-73262 Prowler: Stored XSS in HTML reports through unescaped cloud resource tags

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resourcetags, assembled by unrolldict and parsehtmlstring, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned...

5.4CVSS0.00215EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/12 2:04 p.m.8 views

CVE-2026-49262 Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy

In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route cmsproxy is vulnerable to a Server-Side Request Forgery SSRF attack via DNS Rebinding. A Time-of-Check to Time-of-Use TOCTOU race condition exists between the URL validation phase and the actua...

3CVSS5.4AI score
SaveExploits0References4
CVE
CVE
added 2026/08/12 2:04 p.m.32 views

CVE-2026-49262

CVE-2026-49262 : Aimeos Pagible CMS before version 0.10.4 exposes the administrative proxy route cmsproxy to a Server-Side Request Forgery (SSRF) via DNS rebinding. A TOCTOU race between URL validation and the actual HTTP request allows an attacker to access internal network resources and cloud m...

3CVSS5.2AI score0.00131EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/12 2:04 p.m.9 views

CVE-2026-49262

In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route cmsproxy is vulnerable to a Server-Side Request Forgery SSRF attack via DNS Rebinding. A Time-of-Check to Time-of-Use TOCTOU race condition exists between the URL validation phase and the actua...

3CVSS5.2AI score0.00131EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/08/12 12:19 p.m.16 views

EUVD-2026-57194

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker ...

8.1CVSS5.3AI score0.00768EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 12:19 p.m.12 views

CVE-2026-70468

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker ...

8.1CVSS5.3AI score0.00768EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2026/08/12 12:19 p.m.13 views

CVE-2026-70468

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker ...

8.1CVSS5.3AI score0.00768EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/12 10:17 a.m.11 views

CVE-2026-67284

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.3 - Authenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on files owned by other users...

5.3CVSS0.00207EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 9:58 a.m.10 views

CVE-2026-67284

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.3 - Authenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on files owned by other users...

5.3CVSS5.2AI score0.00207EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/08/12 9:58 a.m.30 views

CVE-2026-67284 Joomla Extension - tabaoca.org - Improper ACL checks allow file operations in Cotton Cloud < 2.0.2

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.3 - Authenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on files owned by other users...

5.3CVSS0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/12 9:58 a.m.9 views

CVE-2026-67284 Joomla Extension - tabaoca.org - Improper ACL checks allow file operations in Cotton Cloud < 2.0.2

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.3 - Authenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on files owned by other users...

5.3CVSS5.3AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 9:58 a.m.42 views

CVE-2026-67284

CVE-2026-67284 affects the Joomla extension from tabaoca.org, with an improper ACL implementation that allows authenticated users to perform file operations (read, delete, overwrite, re-assign permissions) on files owned by other users in Cotton Cloud versions older than 2.0.3. The incident is do...

5.3CVSS5.3AI score0.00207EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/12 9:58 a.m.9 views

EUVD-2026-57162

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.3 - Authenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on files owned by other users...

5.3CVSS5.3AI score0.00207EPSS
SaveExploits0References1
Rows per page
Query Builder