Lucene search
+L

397 matches found

NVD
NVD
•added 2026/10/16 9:17 a.m.•7 views

CVE-2026-101300

Server-Side Request Forgery SSRF reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST request generated by selecting Download PDF. The content is processed by the...

7.1CVSS0.00207EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/16 8:56 a.m.•9 views

EUVD-2026-102829

Server-Side Request Forgery SSRF reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST request generated by selecting Download PDF. The content is processed by the...

7.1CVSS5.8AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/16 8:56 a.m.•19 views

CVE-2026-101300

A Server-Side Request Forgery (SSRF) vulnerability exists in the Wegow ticket sales chart PDF export functionality. An authenticated user with a promoter account can manipulate the parameter of a POST request triggered by selecting Download PDF . The processed content is handled by the export.hi...

7.1CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/16 8:56 a.m.•36 views

CVE-2026-101300 Server-Side Request Forgery in Wegow PDF export

Server-Side Request Forgery SSRF reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST request generated by selecting Download PDF. The content is processed by the...

7.1CVSS0.00207EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/14 3:53 a.m.•17 views

Masscan-Report

Masscan Report Generator A Python tool that generates interactive React-based HTML visualizations from masscan JSON output, featuring a D3.js force-directed network graph. Screenshot Features Interactive Network Graph Force-directed D3.js visualization showing network topology Hierarchical...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/11 3:00 a.m.•21 views

operative-framework

operative framework es un marco de investigación digital, puedes interactuar con múltiples objetivos, ejecutar múltiples módulos, crear enlaces con objetivos, exportar informes a archivos PDF, agregar notas a objetivos o resultados, interactuar con la API RESTful, escribir tus propios módulos...

6AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/30 4:16 p.m.•10 views

CVE-2026-100257

In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...

4.3CVSS0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 3:17 p.m.•44 views

CVE-2026-100257

In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...

4.3CVSS0.00206EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 3:17 p.m.•23 views

CVE-2026-100257

In JetBrains YouTrack versions prior to 2026.2.18991 , a vulnerability exists where Server-Side Request Forgery (SSRF) can occur via stored XHTML injection during the PDF export process. The provided documents do not specify the exact root cause or specific remediation steps beyond the affected v...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/30 3:17 p.m.•13 views

EUVD-2026-90001

In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•7 views

PT-2026-103304

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Stored XHTML injection allows for Server-Side Request Forgery SSRF, a technique where an attacker induces the server to make requests to an unintended location, during the PDF expor...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•11 views

CVE-2026-100257: Server-Side Request Forgery (SSRF)

In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•12 views

Telerik UI for ASP.NET AJAX 2008.3.1314 < 2026.2.708 RadEditor PDF Export SSRF

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2008.3.1314 or later and prior to 2026.2.708. It is, therefore, affected by a server-side request forgery vulnerability. Insufficient validation of content submitted to the RadEditor PDF export feature may...

6.5CVSS6.1AI score0.00419EPSS
SaveExploits0References2
Anthropic
Anthropic
•added 2026/09/28 9:06 p.m.•15 views

ANT-2026-RNHRV8B9 · LibreOffice/core · Stack Buffer Overflow / Off-by-N

stack-buffer-overflow medium CVE-2026-63275 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-RNHRV8B9: CFF hint-stack bound...

6.9CVSS6AI score0.00187EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/23 12:24 a.m.•12 views

SUSE CVE-2026-63276

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

6.9CVSS6.1AI score0.00195EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/23 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-63276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A...

6.9CVSS6AI score0.00195EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/09/22 12:17 p.m.•12 views

DEBIAN-CVE-2026-63276

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

6.9CVSS6.1AI score0.00195EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 12:17 p.m.•24 views

CVE-2026-63276

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

6.9CVSS0.00195EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/22 12:17 p.m.•15 views

CVE-2026-63276

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

6.9CVSS6.1AI score0.00195EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/09/22 12:17 p.m.•11 views

UBUNTU-CVE-2026-63276

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

6.9CVSS6.1AI score0.00195EPSS
SaveExploits0References5
Rows per page
Query Builder