GO-2026-5930 New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs in github.com/QuantumNous/new-api

New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs in github.com/QuantumNous/new-api...

CVE-2026-33655 New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 0.12.0-alpha.1, the default SSRF protection configuration did not apply IP filtering to hostnames; with ApplyIPFilterForDomain disabled by default, URL validation checked domain allow/blo...

CVE-2026-33655 New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 0.12.0-alpha.1, the default SSRF protection configuration did not apply IP filtering to hostnames; with ApplyIPFilterForDomain disabled by default, URL validation checked domain allow/blo...

changedetection.io Cross-site Scripting vulnerability

SummaryInput in parameter notificationurls is not processed resulting in javascript execution in the application Detailschangedetection.io version: v0.45.21https://github.com/dgtlmoon/changedetection.io/blob/0.45.21/changedetectionio/forms.pyL226 for serverurl in field.data: if not...

CVE-2024-22316

creationtimestamp| type| source ---|---|--- 2025-01-27 16:14:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113901204918639470 2025-01-27 16:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmic72f2b 2025-01-27 17:40:20+00:00| seen|...

CVE-2025-21224

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpudugmo62t 2025-01-14 19:26:05+00:00| seen|...

CVE-2024-46464

creationtimestamp| type| source ---|---|--- 2025-01-09 21:56:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113800627825028525 2025-01-09 22:15:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1097 2025-01-09 22:15:43+00:00| seen|...

CVE-2025-22320

creationtimestamp| type| source ---|---|--- 2025-01-07 11:17:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jmj6krk25 2025-01-07 14:10:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113787471358566691 2025-03-11 04:41:05+00:00| seen|...