Lucene search
K

4738 matches found

RedhatCVE
RedhatCVE
added 2025/11/07 12:19 a.m.8 views

CVE-2025-60541

A Server-Side Request Forgery SSRF in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request...

7.3CVSS6.8AI score0.00089EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/06 9:31 p.m.3 views

EUVD-2025-38155

A Server-Side Request Forgery SSRF in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request...

6.3AI score0.00089EPSS
Exploits1References3
OSV
OSV
added 2025/11/06 7:15 p.m.4 views

CVE-2025-60541

A Server-Side Request Forgery SSRF in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request...

7.3CVSS6.7AI score
Exploits0References2
EUVD
EUVD
added 2025/11/06 6:32 p.m.3 views

EUVD-2025-38129

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Processby Lazy Load Optimizer lazy-load-optimizer allows PHP Local File Inclusion.This issue affects Lazy Load Optimizer: from n/a through = 1.4.7...

7.5CVSS6.6AI score0.00113EPSS
Exploits0References2
NVD
NVD
added 2025/11/06 4:16 p.m.1 views

CVE-2025-60074

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Processby Lazy Load Optimizer lazy-load-optimizer allows PHP Local File Inclusion.This issue affects Lazy Load Optimizer: from n/a through = 1.4.7...

7.5CVSS0.00113EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:54 p.m.1 views

CVE-2025-60074 WordPress Lazy Load Optimizer plugin <= 1.4.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Processby Lazy Load Optimizer lazy-load-optimizer allows PHP Local File Inclusion.This issue affects Lazy Load Optimizer: from n/a through = 1.4.7...

7.5CVSS6.7AI score0.00113EPSS
Exploits0References1
CVE
CVE
added 2025/11/06 3:54 p.m.6 views

CVE-2025-60074

CVE-2025-60074 affects the WordPress Lazy Load Optimizer plugin (

7.5CVSS6.7AI score0.00113EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/06 3:54 p.m.6 views

CVE-2025-60074 WordPress Lazy Load Optimizer plugin <= 1.4.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Processby Lazy Load Optimizer lazy-load-optimizer allows PHP Local File Inclusion.This issue affects Lazy Load Optimizer: from n/a through = 1.4.7...

7.5CVSS0.00113EPSS
Exploits0References1
CVE
CVE
added 2025/11/06 12:0 a.m.9 views

CVE-2025-60541

CVE-2025-60541 describes a Server-Side Request Forgery (SSRF) in the linshenkx prompt-optimizer, affecting versions 1.3.0 through 1.4.2. The vulnerability resides in the /api/proxy/ component and enables an attacker to scan internal resources via a crafted request. Public sources (NVD/Red Hat/EUV...

7.3CVSS6.4AI score0.00089EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.2 views

Prompt Optimizer 安全漏洞

Prompt Optimizer is a prompt word optimizer by and Alchemy Time Personal Developer. A security vulnerability exists in Prompt Optimizer versions 1.3.0 through 1.4.2, which stems from a server-side request forgery in the /api/proxy component, which could allow an attacker to scan internal resource...

7.3CVSS6.7AI score0.00089EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.2 views

WordPress plugin Lazy Load Optimizer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

7.5CVSS6.7AI score0.00113EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.3 views

PT-2025-45351

Name of the Vulnerable Software and Affected Versions linshenkx prompt-optimizer versions 1.3.0 through 1.4.2 Description A Server-Side Request Forgery SSRF exists in the /api/proxy/ component. This allows attackers to scan internal resources by sending a specially crafted request. The api/proxy...

7.3CVSS6.6AI score0.00089EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/06 12:0 a.m.1 views

CVE-2025-60541

A Server-Side Request Forgery SSRF in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request...

6.4AI score0.00089EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.3 views

PT-2025-45259

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Processby Lazy Load Optimizer lazy-load-optimizer allows PHP Local File Inclusion.This issue affects Lazy Load Optimizer: from n/a through = 1.4.7...

7.5CVSS7.1AI score0.00113EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/06 12:0 a.m.8 views

CVE-2025-60541

A Server-Side Request Forgery SSRF in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request...

0.00089EPSS
Exploits1References2
OSV
OSV
added 2025/10/31 2:11 p.m.3 views

OESA-2025-2544 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

5.5CVSS5.9AI score0.00048EPSS
Exploits0References9
OSV
OSV
added 2025/10/31 2:11 p.m.2 views

OESA-2025-2543 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

5.5CVSS5.9AI score0.00048EPSS
Exploits0References9
OSV
OSV
added 2025/10/31 2:11 p.m.3 views

OESA-2025-2542 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

5.5CVSS5.9AI score0.00048EPSS
Exploits0References9
OSV
OSV
added 2025/10/31 2:11 p.m.2 views

OESA-2025-2541 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

5.5CVSS5.9AI score0.00048EPSS
Exploits0References9
OSV
OSV
added 2025/10/31 2:11 p.m.3 views

OESA-2025-2540 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

5.5CVSS5.9AI score0.00048EPSS
Exploits0References9
Rows per page
Query Builder