CVE-2026-63764 LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass

LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery SSRF vulnerability in the loadhttpurl function within the connection.py media handler, where the private-IP guard validates only the original URL without re-validating hosts after HTTP redirects. An...

ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway

Summary ToolHive's hand-rolled private/reserved-IP SSRF guard networking.IsPrivateIP in pkg/networking/utilities.go does not recognize the IPv6 NAT64 address ranges — the well-known prefix 64:ff9b::/96 RFC 6052 and the RFC 8215 local-use prefix 64:ff9b:1::/48. As a result, an address such as...

CVE-2024-40051

IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter...

CVE-2024-40051

IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter...

CVE-2024-40051: Improper Limitation of a Pathname to a Restricted Directory

IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter...

CVE-2024-40051

IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter...

CVE-2024-40051

CVE-2024-40051 affects IP Guard v4.81.0307.0, which is reported to contain an arbitrary file read vulnerability exploitable via the file name parameter. Public sources across Red Hat and NVD reiterate the same description: the issue allows reading arbitrary files, with CVSS 3.1/AV:N/AC:L/PR:N/UI:...

CVE-2024-40051

IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter...

PT-2024-28768 · Ip Guard · Ip Guard

Name of the Vulnerable Software and Affected Versions: IP Guard version 4.81.0307.0 Description: The issue allows for an arbitrary file read via the file name parameter. Recommendations: For IP Guard version 4.81.0307.0, consider restricting access to the file name parameter to minimize the risk ...

Arbitrary File Read Vulnerability in ip-guard of Guangzhou Yixin Technology Co.

ip-guard is an all-in-one endpoint security management software, covering all the functions required by enterprises to protect endpoint security, including document encryption, operation control, log audit, sensitive content identification, asset and operation and maintenance management. Ltd...

Logic flaw vulnerability in ip-guard of Guangzhou ECS Technology Co.

IP-guard is an all-in-one endpoint security management software, covering all the functions required by enterprises to protect endpoint security, including document encryption, operation control, log audit, sensitive content identification, asset and operation and maintenance management. Ltd...