GHSA-VWQ2-JX9Q-9H9F Soft Serve is vulnerable to SSRF through its Webhooks

SUMMARY We have identified and verified an SSRF vulnerability where webhook URLs are not validated, allowing repository administrators to create webhooks targeting internal services, private networks, and cloud metadata endpoints. AFFECTED COMPONENTS VERIFIED 1. Webhook Creation...

CVE-2025-46363

Dell Secure Connect Gateway (SCG) 5.0 software and appliances 5.26.00.00–5.30.00.00 expose a Relative Path Traversal via an internal collection download REST API that is usable when enabled from the Admin UI. A low-privilege remote attacker could abuse this to access restricted resources. A remed...

PT-2025-44418

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway versions 5.26.00.00 through 5.30.00.00 Description Dell Secure Connect Gateway SCG 5.0 Application and Appliance versions 5.26.00.00 through 5.30.00.00 contain a Relative Path Traversal vulnerability. This issue...

CVE-2025-34277: Improper Control of Generation of Code

Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly validated before being forwarded to an internal API. An attacker able to supply crafted dashboard ID values can cause the system to execute attacker-controlle...

PT-2025-42638

Name of the Vulnerable Software and Affected Versions LobeChat versions prior to 1.136.2 Description LobeChat is susceptible to a server-side request forgery SSRF issue within the tools.search.crawlPages tRPC endpoint. An attacker can provide arbitrary URLs and specify the 'naive' implementation,...

EUVD-2016-4183

Malware in sbrugna...

EUVD-2020-18350

Malware in sbrugna...

EUVD-2017-12947

Malware in sbrugna...

EUVD-2020-0484

Malware in sbrugna...

EUVD-2024-24409

Malicious code in bioql PyPI...

EUVD-2022-2757

Malicious code in bioql PyPI...

EUVD-2022-33891

Malicious code in bioql PyPI...

EUVD-2023-32655

Malicious code in bioql PyPI...

EUVD-2025-11537

Malicious code in bioql PyPI...

EUVD-2024-26027

Malicious code in bioql PyPI...

EUVD-2024-26028

Malicious code in bioql PyPI...

EUVD-2024-34062

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-43703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker- controlled access to the internal API even though the...

Exploit for CVE-2024-45352

🚨 CVE-2024-45352 – Xiaomi Smarthome Remote Code Execution RCE...

CVE-2025-20282

A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root. This vulnerability is due a lack of file validation checks tha...