grafana-ssrf

grafana-ssrf Authenticated SSRF in Grafana. Notes Azure metadata header has been added to all SSRFS Google metadata header has been added to all SSRFS SSRF will not follow redirects no matter what so ensure url is direct. If login is via SSO or other none grafana logins please grab your session...

PT-2026-30984

Name of the Vulnerable Software and Affected Versions OpenObserve versions prior to 0.70.4 Description OpenObserve, a cloud-native observability platform, has an issue where the validate enrichment url function in src/handler/http/request/enrichment table/mod.rs does not properly block IPv6...

org.jenkins-ci.main:jenkins-test-harness (1.521), org.jenkins-ci.main:jenkins-war (1.521) +9 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.521)

org.jenkins-ci.main:jenkins-core MAVEN version 1.521 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.521 - org.jenkins-ci.main:jenkins-war 1.521 -...

org.jenkins-ci.main:jenkins-test-harness (1.521), org.jenkins-ci.main:jenkins-war (1.521) +9 more potentially affected by CVE-2017-17383 via org.jenkins-ci.main:jenkins-core (1.521)

org.jenkins-ci.main:jenkins-core MAVEN version 1.521 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.521 - org.jenkins-ci.main:jenkins-war 1.521 -...

Snapchat: Server-Side Request Forgery using Javascript allows to exfill data from Google Metadata

Hey there, I was looking at your ads site with @daeken, we found some weird behavior in the import function of the creative app. Here are the steps: POC - Login to https://business.snapchat.com/ - Go to creative library - New Creative - Under "Topsnap Media", click on "Create" - Click on any of t...