CVE-2026-15409

🚨 CVE-2026-15409 SonicWall SMA1000 श्रृंखला में गंभीर अप्रमाणित SSRF SonicWall SMA1000 श्रृंखला उपकरणों को प्रभावित करने वाली गंभीर सर्वर-साइड रिक्वेस्ट फ़ोर्जरी SSRF कमज़ोरी। यह रिपॉजिटरी कमज़ोरी, प्रभावित उत्पादों, तकनीकी अवलोकन, प्रभाव, पता लगाने के दिशानिर्देश और समाधान का दस्तावेज़ीकरण करती...

CVE-2020-23585

CVE-2020-23585 OPTILINK E-PON "رقم الموديل: OP-XT71000N" مع "إصدار العتاد: V2.2" و "إصدار البرنامج الثابت: OPV3.3.1-191028" يمكن لمهاجم عن بعد تنفيذ هجوم تزوير الطلب عبر المواقع CSRF على "OPTILINK OP-XT71000N إصدار العتاد: V2.2، إصدار البرنامج الثابت: OPV3.3.1-191028". يرجع الثغرة إلى عدم كفاية...

Deep-Reaver

Deep Reaver Deep Reaver एक शक्तिशाली, AI-संवर्धित भेद्यता आकलन और शोषण टूलकिट है जो Python में बनाया गया है। Nmap और Nessus जैसे उपकरणों से प्रेरित, Deep Reaver को वेब अनुप्रयोगों और सेवाओं की गहन, मॉड्यूलर स्कैनिंग के लिए डिज़ाइन किया गया है। विशेषताएं aiassistant.py के माध्यम से AI-सहायित...

CVE-2026-102777

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

CVE-2024-5736

CVE-2024-5736 إضافة AdmirorFrames لـ Joomla! 5.0 - تزوير الطلبات من جانب الخادم SSRF الجدول الزمني تم إبلاغ البائع بالثغرة: 26.01.2024 تم إصدار الإصدار 5.0 الثابت الجديد: 06.06.2024 الإفصاح العام: 28.06.2024 الوصف ثغرة تزوير الطلبات من جانب الخادم SSRF في إضافة AdmirorFrames لـ Joomla! في ملف...

CVE-2026-102776

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

CVE-2026-102776

The Joomla Extension - svenbluege.de 's Event Gallery extension (versions

EUVD-2026-92451

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is affected by a cross-site request forgery vulnerability (CVE-2026-8408)

Summary A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager CVE-2026-8408 Vulnerability Details CVEID:CVE-2026-8408 DESCRIPTION: IBM WebSphere Application Server is affected by a cross-site request forgery,...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-11710 DESCRIPTION: IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling...

CVE-2026-92931

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2026-92931

The @progress/sitefinity-nextjs-sdk npm package (versions 15.1.8326 through 15.4.8637 ) is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918). This flaw may allow a remote attacker to force the server to make requests to an attacker-controlled host , which could lead to the exposure of ...

CVE-2026-92931 CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2026-92931 CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2026-105290

The software feelec-yishu feelcrm-os version 1.0.0 is vulnerable to a server-side request forgery (SSRF) . The flaw exists within the getCurlData endpoint, specifically involving an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php. An attacker can remotely launch t...

CVE-2026-105290 feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery

A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. It is...

CVE-2026-105290 feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery

A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. It is...

security-research

البحث الأمني الثغرات التي أبلغت عنها إلى مؤسسة Apache Software Foundation، وتم الكشف عنها من خلال عملية أمان ASF. 46 ثغرة CVE عبر 15 مشروعًا ، من 2023 إلى 2026. حيثما يتوفر مُعيد إنتاج عام، يتم ربطه. كل واحد منها مشروع بسيط ومكتفٍ ذاتيًا يوضح المشكلة ويحدد الإصدار الذي أصلحها. عبر 25 ثغرة CWE...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - 인증되지 않은 서버 측 요청 위조 설명 플러그인 'Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress'는 2.0.82를 포함한 모든 버전에서 서버 측 요청 위조에 취약합니다. 이로 인해 인증되지 않은 공격자가 웹 애플리케이션에서 시작된 임의의 위치로 웹 요청을 보낼 수 있으며, 이를 사용해 내부 서비스의 정보를 조회하거나 수정할 수 있습니다. 세부 정보 유형 : 플러...