CVE-2020-23585

CVE-2020-23585 OPTILINK E-PON "MODEL NO: OP-XT71000N" 与 "HARDWARE VERSION: V2.2"; 及 "FIRMWARE VERSION: OPV3.3.1-191028" 远程攻击者可对 "OPTILINK OP-XT71000N 硬件版本：V2.2，固件版本：OPV3.3.1-191028" 发起跨站请求伪造（CSRF）攻击。该漏洞源于 "mgmconfigfile.asp" 缺乏充分的 CSRF 防护，因此攻击者可创建精心构造的 "CSRF 表单"，向...

EUVD-2026-70557

Server-Side Request Forgery SSRF vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEOPress: from n/a through 10.1...

CVE-2026-85305

A Server-Side Request Forgery (SSRF) vulnerability affects the SEOPress WordPress plugin in versions from n/a through 10.1 . The flaw allows an attacker to force the server to make unintended requests. The CVSS v3.1 score is 5.4 (MEDIUM) , with a network vector, low complexity, low privileges req...

CVE-2026-84761 WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...

EUVD-2026-70583

Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...

CVE-2026-84761

CVE-2026-84761 affects the WordPress LiteSpeed Cache plugin in versions 7.9 and earlier , where an unauthenticated Server Side Request Forgery (SSRF) flaw is present. The CVSS v3.1 score is 7.2 (HIGH) with a Changed scope and low impacts to both confidentiality and integrity, while availability i...

CVE-2026-85242 Server-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCapture

PlaywrightCapture contains a server-side request forgery SSRF vulnerability in its favicon retrieval functionality. When onlygloballookup is enabled, the application validates the initial favicon URL to prevent requests to localhost, loopback, or other non-public network addresses. However,...

EUVD-2026-70598

PlaywrightCapture contains a server-side request forgery SSRF vulnerability in its favicon retrieval functionality. When onlygloballookup is enabled, the application validates the initial favicon URL to prevent requests to localhost, loopback, or other non-public network addresses. However,...

svg-cheatsheet

SVG SSRF 速查表 处理 SVG 的主机由于 SVG 的丰富功能，可能容易受到 SSRF、LFI、XSS、RCE 攻击。 所有这些方法都指定一个 URI，可以是绝对的，也可以是相对的。File 和 HTTP 协议是重要的测试对象，但根据实现的不同，它还可能支持其他协议（例如 PHP 流协议），包括 javascript: 和 data:。 本文档列出了我所知道的在 SVG 中滥用此功能的所有方式。 请注意，一些声称不接受 SVG 作为输入格式的服务，实际上稍加诱导就会接受。 对于上传，请发送 JPEG/PNG 的 MIME 类型和文件名。 对于下载，请使用 JPEG/PNG 的文件...

CVE-2026-84962

CVE-2026-84962 is a CRLF injection vulnerability in MongoDB client-side encryption (tracked as MONGOCRYPT-960) affecting GCP key identifier strings . An unauthorized user with key vault write access can forge authenticated Google Cloud KMS API calls under an authorized user's identity by injectin...

ConceptronicIPCam_MultipleVulnerabilities

Múltiples vulnerabilidades en cámaras IP Conceptronic con firmware web 0.61.X. Se han encontrado vulnerabilidades CSRF y Denegación de Servicio en cámaras IP Conceptronic. CVE| Descripción ---|--- CVE-2018-6407| Vulnerabilidad de denegación de servicio remota no autenticada CVE-2018-6408| CSRF...

EUVD-2026-70483

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private networks and exfiltrate annotation data by enabling payload...

CVE-2026-85179

Label Studio versions through 1.23.0 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the webhook functionality (specifically in webhooks/utils.py). The application fails to validate webhook URLs , allowing authenticated users to dispatch outbound requests to internal network...

CVE-2026-85163

AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the EPG parser that allows authenticated uploaders to fetch arbitrary internal URLs. An attacker can supply an internal URL via the epglink parameter during video upload, which is validated only for syntax and...

EUVD-2026-70413

A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/app/artifacts/index.tsx of the component Link Title Fetch. Such manipulation of the argument url leads to server-side request forgery. The attack can be launch...

CVE-2026-85164

WWBN AVideo (through commit c91b5975d) contains a Server-Side Request Forgery (SSRF) vulnerability in the set_api_userImages API endpoint. The endpoint fails to validate the profileImg and backgroundImg URL parameters before fetching them, allowing an authenticated API client to supply internal U...

EUVD-2026-70396

AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in removePoster.php that lacks forbidIfNotPost or forbidIfInvalidToken checks. Attackers can craft malicious image tags to delete authenticated victims' live poster and thumbnail files via GET requests...

CVE-2026-85161 AVideo removePoster.php Cross-Site Request Forgery File Deletion

AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in removePoster.php that lacks forbidIfNotPost or forbidIfInvalidToken checks. Attackers can craft malicious image tags to delete authenticated victims' live poster and thumbnail files via GET requests...

EUVD-2026-70372

Server-Side Request Forgery SSRF vulnerability in the /ocsreports/?function=teleactivate endpoint due to insufficient validation of the HTTPSSERV and FILESERV parameters. An authenticated user with operator privileges can provide arbitrary values for these parameters, causing the OCS Inventory...

CVE-2026-75898

CVE-2026-75898 — RAGFlow Invoke 组件 SSRF RAGFlow 代理工作流 "Invoke" 组件中的服务端请求伪造（CWE-918），影响 0.26.3 之前的版本 。 | ---|--- CVE| CVE-2026-75898 CVSS| 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N 修复版本| v0.26.3 修复提交| c4fe68e, e16d1a0 问题引用| infiniflow/ragflow15425, 18280 安全公告| VulnCheck 根本原因 在 v0.26.2 的...