Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/11 2:17 p.m.•15 views

CVE-2026-108850

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed inline img elements in reportcontent ...

6.9CVSS0.00239EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/11 1:26 p.m.•21 views

EUVD-2026-97001

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed inline img elements in reportcontent ...

6.9CVSS5.8AI score0.00239EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/11 1:26 p.m.•28 views

CVE-2026-108850 Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markup

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed inline img elements in reportcontent ...

6.9CVSS5.9AI score
SaveExploits0References7
CVE
CVE
•added 2026/10/11 1:26 p.m.•26 views

CVE-2026-108850

The Company Research Agent software (versions through 2.2.0 ) is vulnerable to a server-side request forgery (SSRF) via the /generate-pdf endpoint. The root cause is the injection of unescaped ReportLab paragraph markup into the report_content parameter. Unauthenticated attackers can embed inline...

6.9CVSS5.8AI score0.00239EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/11 1:26 p.m.•44 views

CVE-2026-108850 Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markup

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed inline img elements in reportcontent ...

6.9CVSS0.00239EPSS
SaveExploits0References5
Packet Storm
Packet Storm
•added 2010/06/23 12:00 a.m.•41 views

Rising Tide Media LLC CMS SQL Injection

Rising Tide Media LLC CMS SQL Injection Vulnerability EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit Code: Vulnerable App: . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / /...

0.6AI score
SaveExploits0
Rows per page
Query Builder