Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
added 2026/06/18 1:56 p.m.17 views

praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS

praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS Researcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security Research Target: https://github.com/MervinPraison/PraisonAI Weakness: CWE-918 Server-Side Request Forgery SSRF. --- Summary The SSRF gua...

5.5CVSS5.3AI score0.00165EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2026/04/16 10:51 a.m.13 views

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

7.5CVSS5.8AI score0.00728EPSS
SaveExploits0References8
OSV
OSV
added 2026/01/30 3:41 p.m.10 views

CLEANSTART-2026-ER42900 ParseAddress function constructs domain-literal address components through repeated string concatenation

Multiple security vulnerabilities affect the external-dns-fips package. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...

9.8CVSS5.5AI score0.00617EPSS
SaveExploits2References29
OpenVAS
OpenVAS
added 2012/02/06 12:0 a.m.31 views

Mandriva Update for mozilla MDVSA-2012:013 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2012:013 mozilla Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

10CVSS0.9AI score0.36649EPSS
SaveExploits11References2
Rows per page
Query Builder