log4v-vuln-check

Log4JS 文件与漏洞扫描器 + 本地端口绑定扫描器 此脚本用于快速检查您的服务器是否可能受到 CVE-2021-44228（log4j 漏洞）的影响。 它不能 100% 保证您没有漏洞，但会提示您是否有可能存在漏洞。 功能： 更新 apt 软件仓库 "sudo apt-get update -y"（已禁用，如需使用请取消注释） 安装脚本依赖 "sudo apt-get install lsof unzip locate mlocate -y"（已禁用，如需使用请取消注释） 更新本地 locate 文件索引数据库 "sudo updatedb" 使用 'find & locate' 扫...

Malicious code in react-campaign-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a040ca9a32fe68e08906bdc58b7ae907b8f8092acd9764266de15004b3922e9f On npm install, the package runs node postinstall.js declared in package.json scripts.postinstall which performs unauthenticated, unconsented...

CVE-2026-34225

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.7.2 and below contain a Blind Server Side Request Forgery in the functionality that allows editing an image via a prompt. The affected function performs a GET request to a user-provided U...

WS-2023-0327

Presto JDBC is vulnerable to Server-Side Request Forgery SSRF when connecting a remote Presto server. An attacker can modify the nextUri parameter to internal server in response content that Presto JDBC client will request next and view sensitive information from highly sensitive internal servers...

SEO Panel Security Breach

SEO Panel is an open source panel for managing website SEO Search Engine Optimization. A security vulnerability exists in SEO Panel version 4.10.0, which stems from a stored server segment request forgery vulnerability in the Crawl Meta Data feature that allows remote attackers to scan ports in t...

CVE-2023-44256: Improper Limitation of a Pathname to a Restricted Directory

A server-side request forgery vulnerability CWE-918 in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal...

CVE-2023-26492: Server-Side Request Forgery (SSRF)

Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery SSRF when importing a file from a remote web server POST to /files/import. An attacker can bypass the security controls by performing a DNS rebinding attack and...