8 matches found
Server-side request forgery (SSRF) via unvalidated RSS feed URLs
More info at https://contao.org/en/security-advisories/server-side-request-forgery-via-unvalidated-rss-feed-urls...
PT-2026-54943
The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 via the 's' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information...
CVE-2026-7890 Concrete CMS 9.5.0 is vulnerable to SSRF via RSS Displayer Block
In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor and fetches it server-side without validation enabling redirect-to-internal bypasses. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.1 with a...
PT-2026-39674
Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in promptForFeedUrl, but item links inside the feed are not subject to the same restriction. The provider maps each RSS/Atom item link into item.url, filters only for presence and...
Feed links can link to local files – Opera Security Advisories
Feed links can link to local files – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Less Severe Problem Description As a security precaution, Opera does not allow Web pages to link to files on the user’s local disk. However, a flaw exists that allows Web pages to link to feed...
Opera Web Browser Multiple Security Vulnerabilities Aug-08 (Windows)
The remote host is running Opera Web Browser, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnaug08win900038.nasl 5375 2017-02-20 16:39:23Z cfi $ Description: Opera Web Browser Multiple Security Vulnerabilities Aug-08 Windows Authors: Chandan S...
Opera Web Browser Multiple Security Vulnerabilities Aug-08 (Linux)
The remote host is running Opera Web Browser, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnaug08lin900039.nasl 7524 2017-10-20 08:31:54Z cfischer $ Description: Opera Web Browser Multiple Security Vulnerabilities Aug-08 Linux Authors: Chandan S...
