Lucene search
+L

19033 matches found

EUVD
EUVD
added 2026/06/26 3:32 p.m.17 views

EUVD-2026-39779

Mattermost versions 10.11.x = 10.11.18, 11.6.x = 11.6.3, 11.5.x = 11.5.6 fail to validate attachment URLs against internal or private IP ranges in the Mattermost Agents plugin MCP server which allows an attacker with access to the MCP server in stdio mode to perform server-side request forgery SS...

6.5CVSS5.8AI score0.00139EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/26 3:16 p.m.18 views

CVE-2026-4339

Mattermost versions 10.11.x = 10.11.18, 11.6.x = 11.6.3, 11.5.x = 11.5.6 fail to validate attachment URLs against internal or private IP ranges in the Mattermost Agents plugin MCP server which allows an attacker with access to the MCP server in stdio mode to perform server-side request forgery SS...

6.5CVSS0.00139EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/26 12:00 a.m.26 views

PT-2026-53023

Name of the Vulnerable Software and Affected Versions Aimeos Pagible versions prior to 0.10.4 Description The administrative proxy route /cmsproxy is susceptible to Server-Side Request Forgery SSRF through DNS Rebinding. This occurs due to a Time-of-Check to Time-of-Use TOCTOU race condition—a...

3CVSS5.3AI score0.00131EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/26 12:00 a.m.24 views

PT-2026-52849

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.12 through 6.9 Description A Server-Side Request Forgery SSRF issue exists in the image import functionality. Authenticated users possessing the can create images entitlement can interact with internal network...

5CVSS6AI score0.00278EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2026/06/26 12:00 a.m.68 views

PT-2026-53022

Name of the Vulnerable Software and Affected Versions Nebula Mesh affected versions not specified Description The web UI /ui/ fails to apply per-operator Certificate Authority CA scoping. This allows any authenticated non-admin operator to access, block, or delete resources belonging to other...

8.8CVSS6AI score0.00283EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/25 11:23 p.m.26 views

CVE-2026-13318

A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...

6.4CVSS6AI score0.00236EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/25 6:07 p.m.49 views

CVE-2026-56771 NewsBlur < 14.5.0 - Server-Side Request Forgery via add_url Endpoint

NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the addurl endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. Attackers can exploit this to access localhost services and...

8.5CVSS0.00351EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/25 6:07 p.m.39 views

CVE-2026-56771

NewsBlur prior to 14.5.0 is affected by an SSRF in the add_url endpoint. The issue lets authenticated users trigger arbitrary server requests to internal networks by failing to filter private IPs, potentially reaching localhost services and cloud metadata endpoints. This enables internal network ...

8.5CVSS6AI score0.00351EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/25 6:07 p.m.19 views

EUVD-2026-39524

NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the addurl endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. Attackers can exploit this to access localhost services and...

8.5CVSS6AI score0.00351EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/25 6:07 p.m.15 views

CVE-2026-56771 NewsBlur < 14.5.0 - Server-Side Request Forgery via add_url Endpoint

NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the addurl endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. Attackers can exploit this to access localhost services and...

6.3CVSS6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/06/25 6:07 p.m.15 views

CVE-2026-56771 NewsBlur < 14.5.0 - Server-Side Request Forgery via add_url Endpoint

NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the addurl endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. Attackers can exploit this to access localhost services and...

8.5CVSS6AI score0.00351EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/25 12:00 a.m.27 views

PT-2026-52545

Name of the Vulnerable Software and Affected Versions NewsBlur versions prior to 14.5.0 Description Authenticated users can perform server-side request forgery SSRF via the 'add url' endpoint. This occurs because the application fails to filter private IP addresses, allowing arbitrary server...

8.5CVSS5.9AI score0.00351EPSS
SaveExploits0References7
Snyk
Snyk
added 2026/06/24 9:17 p.m.10 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the webhook delivery process. An attacker can access internal network resources by supplying a webhook URL that follows redirects to hostnames within restricted local address ranges. Remediation Upgra...

8.8CVSS6AI score0.0042EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/24 8:09 p.m.75 views

CVE-2026-47267

Gogs webhook deliveries (CVE-2026-47267) enable SSRF via redirects even after the CVE-2022-1285 fix; localCIDR/169.254.169.254 exposure was demonstrated in GHSA advisory. Affected: Gogs before 0.14.3; fix: upgrade to 0.14.3 (or apply redirect-checking mitigation, e.g., Client.CheckRedirect). Impa...

8.3CVSS7.2AI score0.0042EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2026/06/24 8:09 p.m.11 views

CVE-2026-47267

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the fix for CVE-2022-1285 prevents adding webooks or running webhooks with URLs with a hostname that resolves in localCIDRs. However, webhooks still follow redirects allowing to access hostname inside localCIDRs. This vulnerability ...

8.3CVSS7.2AI score0.0042EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
added 2026/06/24 6:09 p.m.9 views

CVE-2026-53945

Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacker to coerce the Ghost server into reaching hosts on internal networks through features that issue external fetches. Th...

4CVSS5.9AI score0.00214EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/24 6:09 p.m.44 views

CVE-2026-53945 Ghost: Server-side request forgery via DNS rebinding in external request handling

Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacker to coerce the Ghost server into reaching hosts on internal networks through features that issue external fetches. Th...

4CVSS0.00214EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/06/24 3:59 p.m.18 views

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

A coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and Microsoft, has resulted in the takedown of criminal infrastructure powering Amadey and StealC. "The main common goal was to disrupt the 'assembly lines' cybercriminals...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/24 7:25 a.m.24 views

CVE-2026-48491

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability allows an unauthenticated client to bypass mutual Transport Layer Security TLS enforcement, a security measure that verifies both client and server identities. The bypass occurs due to an issue in Traefik's...

10CVSS5.8AI score0.00357EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/06/24 12:00 a.m.35 views

PT-2026-52069

Name of the Vulnerable Software and Affected Versions Ghost versions 6.0.9 through 6.21.0 Description Ghost is a Node.js content management system. A flaw in the private-IP check for outbound HTTP requests allows a bypass via DNS rebinding. DNS rebinding is a technique that tricks a browser or...

4CVSS5.8AI score0.00214EPSS
SaveExploits0References5
Rows per page
Query Builder