EUVD-2025-22144

Malicious code in bioql PyPI...

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

CVE-2025-52362

A Server-Side Request Forgery (SSRF) vulnerability exists in the PHProxy web proxy software (version 1.1.1 and prior). The root cause is insufficient input validation for the _proxurl parameter during URL processing. This flaw allows a remote, unauthenticated attacker to submit a specially crafte...

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

CVE-2004-2604

Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...

[UNIX] PHProxy Cross Site Scripting

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...