TYPO3 Kitodo.Presentation: Server-side request forgeing vulnerability

Versions of TYPO3 prior to 6.0.1 and from 7.0.0 to 7.0.2 contain a server-side request forgeing vulnerability. This vulnerability stems from an HTTP request method that fails to perform authorization checks. As a result, the requester has full control over the accessed URL. Unauthenticated...

Eclipse ThreadX – NetX Duo input validation vulnerability

Eclipse ThreadX – NetX Duo 6.5.1.202602 and earlier versions have a vulnerability related to input validation errors. This vulnerability arises because the HTTP server of Web Add-ons scans the entire request packet during the search for header fields, rather than stopping at the end of the header...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the deviceName function of the boa formParentControl component. A specially crafted HTTP request can lead to arbitrary code execution,...

Oracle Applications Framework Cross-Site Request Forgery Vulnerability

Oracle Applications Framework versions 12.2.3 to 12.2.15 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Personalization component. It may allow low-privilege attackers to access through the HTTP network, and to create, delete, or modify critical da...

Eclipse CSI - PIA server request forgery vulnerability

Eclipse CSI – Versions 0.8.0 and earlier contain a server-side request forgery vulnerability. This vulnerability arises because the verifytoken function fails to parse the jwksuri in OIDC discovery documents as a URL, fails to compare it with the source of an approved issuer, and does not enforce...

Apostrophe Technologies ApostropheCMS has a vulnerability related to improper output processing.

Apostrophe Technologies' ApostropheCMS has a vulnerability in its output processing. This vulnerability stems from the fact that these CAPTCHA integrations insert unencoded response tokens provided by users into provider validation requests. This can lead to request parameter injection, disruptio...

Apache Airflow Amazon provider cross-site request forgeing vulnerability

Apache Airflow’s Amazon provider versions prior to 9.38.0 have a cross-site request forgery vulnerability. This vulnerability stems from the SAML login process of the AWS auth manager, which does not bind the authentication response to the browser that initiated the login. The login processor...

WAVLINK WL-WN530BE1-A has a command injection vulnerability

The WAVLINK WL-WN530BE1-A M30BE1V251117 and earlier versions have a command injection vulnerability. This vulnerability stems from the ios binary sub23B54 function, which passes the uncleaned fileid parameter of type=del in the request/protocol.csp?opt=ovpnfile to popen. A remote unauthenticated...

resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config

A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins "", reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive cross-origin policy allows a malicious website to...

EUVD-2026-104400

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validateurl private-address check. Attackers influencing agent tool input through prompt injection can direct...

CVE-2026-112308

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validateurl private-address check. Attackers influencing agent tool input through prompt injection can direct...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in NuGet RestSharp

Summary NuGet RestSharp is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-45302 Vulnerability Details CVEID:CVE-2024-45302 DESCRIPTION: RestSharp is a Simple REST and HTTP API Client for .NET. The second argument to RestRequest.AddHeader the header value is...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the checkFailure function in the CXF SOAP consumer. An external caller can read internal class and package names and exception messages by sending a SOAP request that triggers an undeclared route failure; if CXF...

CVE-2026-112288

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...

CVE-2026-111936

Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...

CVE-2026-111883

Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...

EUVD-2026-104285

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...

EUVD-2026-104315

Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...

EUVD-2026-104320

Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...

CVE-2026-111883

Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...