8 matches found
doctrack
Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...
CVE-2026-41271
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery SSRF vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the server to make arbitrary HTTP requests t...
PraisonAI 代码问题漏洞
PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.5.128 contained code vulnerabilities. These vulnerabilities stemmed from the/api/v1/runs endpoint allowing arbitrary webhook URLs without proper URL validation, which could le...
liquidjs 安全漏洞
LiquidJS is a simple, expressive, secure, and compatible JavaScript template engine developed by Jun Yang. Versions of LiquidJS prior to 10.25.3 contained security vulnerabilities; these vulnerabilities stemmed from path-based checks instead of checking actual paths, which could lead to external...
CVE-2026-32055 OpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlink
OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace through in-workspace symlinks pointing to non-existent out-of-root targets. The vulnerability exists because the boundary check...
PT-2025-40531
Name of the Vulnerable Software and Affected Versions TCL 65C655 Smart TV version V8-R75PT01-LF1V269.001116 Description The TCL 65C655 Smart TV is susceptible to a Server-Side Request Forgery SSRF issue. This affects the UPnP MediaRenderer service AVTransport:1, which accepts unauthenticated...
CVE-2025-55971
The TCL 65C655 Smart TV running firmware version V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+) is vulnerable to a blind, unauthenticated Server-Side Request Forgery (SSRF) . The flaw exists in the UPnP MediaRenderer service (AVTransport:1) , which accepts unauthenticated SetAVTransportU...
