Lucene search
+L

109 matches found

EUVD
EUVD
added 2025/11/10 5:21 p.m.3 views

EUVD-2025-48934

Malicious code in academicsalamanderz3n npm...

6.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/03/16 12:00 a.m.29 views

GLSA-202003-11 : SVG Salamander: Server-Side Request Forgery

The remote host is affected by the vulnerability described in GLSA-202003-11 SVG Salamander: Server-Side Request Forgery A Server-Side Request Forgery was discovered in SVG Salamander. Impact : An attacker, by sending a specially crafted SVG file, can conduct SSRF. Workaround : There is no known...

7.4CVSS7.3AI score0.01992EPSS
SaveExploits0References2
Gentoo Linux
Gentoo Linux
added 2020/03/14 12:00 a.m.107 views

SVG Salamander: Server-Side Request Forgery

Background SVG Salamander is a light weight SVG renderer and animator for Java. Description A Server-Side Request Forgery was discovered in SVG Salamander. Impact An attacker, by sending a specially crafted SVG file, can conduct SSRF. Workaround There is no known workaround at this time. Resoluti...

7.4CVSS1.1AI score0.01992EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2018/10/19 4:51 p.m.26 views

Server Side Request Forgery in svgSalamander

The SVG Salamander aka svgSalamander library, when used in a web application, allows remote attackers to conduct server-side request forgery SSRF attacks via an xlink:href attribute in an SVG file...

7.4CVSS5.7AI score0.01992EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2018/10/19 4:51 p.m.37 views

GHSA-H3WV-47XM-4MG6 Server Side Request Forgery in svgSalamander

The SVG Salamander aka svgSalamander library, when used in a web application, allows remote attackers to conduct server-side request forgery SSRF attacks via an xlink:href attribute in an SVG file...

7.4CVSS7.2AI score0.01992EPSS
SaveExploits0References11
Openbugbounty
Openbugbounty
added 2018/09/15 10:11 a.m.12 views

salamanderpumps.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-676905 Description| Value ---|--- Affected Website:| salamanderpumps.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
NVD
NVD
added 2017/03/16 3:59 p.m.21 views

CVE-2017-5617

The SVG Salamander aka svgSalamander library, when used in a web application, allows remote attackers to conduct server-side request forgery SSRF attacks via an xlink:href attribute in an SVG file...

7.4CVSS7.3AI score0.01992EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2017/03/16 3:59 p.m.28 views

CVE-2017-5617

The SVG Salamander aka svgSalamander library, when used in a web application, allows remote attackers to conduct server-side request forgery SSRF attacks via an xlink:href attribute in an SVG file...

7.4CVSS7.1AI score0.01992EPSS
SaveExploits0References3
OSV
OSV
added 2017/03/16 3:59 p.m.9 views

UBUNTU-CVE-2017-5617

The SVG Salamander aka svgSalamander library, when used in a web application, allows remote attackers to conduct server-side request forgery SSRF attacks via an xlink:href attribute in an SVG file...

7.4CVSS7.1AI score0.01992EPSS
SaveExploits0References4
OSV
OSV
added 2017/03/16 3:59 p.m.11 views

CVE-2017-5617

The SVG Salamander aka svgSalamander library, when used in a web application, allows remote attackers to conduct server-side request forgery SSRF attacks via an xlink:href attribute in an SVG file...

7.4CVSS7.3AI score
SaveExploits0References8
OSV
OSV
added 2017/03/16 3:59 p.m.10 views

DEBIAN-CVE-2017-5617

The SVG Salamander aka svgSalamander library, when used in a web application, allows remote attackers to conduct server-side request forgery SSRF attacks via an xlink:href attribute in an SVG file...

7.4CVSS7AI score0.01992EPSS
SaveExploits0References1
CVE
CVE
added 2017/03/16 3:00 p.m.107 views

CVE-2017-5617

SVG Salamander (svgSalamander) is affected by CVE-2017-5617: a crafted SVG file can trigger server-side request forgery (SSRF) via an xlink:href attribute in web applications using the library. The vulnerability impacts the SVG rendering component and is described in multiple advisories (e.g., GL...

7.4CVSS7.2AI score0.01992EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2017/03/16 3:00 p.m.31 views

CVE-2017-5617

The SVG Salamander aka svgSalamander library, when used in a web application, allows remote attackers to conduct server-side request forgery SSRF attacks via an xlink:href attribute in an SVG file...

7.2AI score0.01992EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2017/03/16 3:00 p.m.39 views

CVE-2017-5617

The SVG Salamander aka svgSalamander library, when used in a web application, allows remote attackers to conduct server-side request forgery SSRF attacks via an xlink:href attribute in an SVG file...

7.4CVSS7.3AI score0.01992EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2017/02/13 12:00 a.m.40 views

Altap Salamander 2.5 PE Viewer Buffer Overflow (CVE-2007-3314)

A buffer overflow exists in Altap Salamander. A remote attacker could trigger this vulnerability by creating a malicious file and convincing a user to view the file with the Portable Executable Viewer plugin within a vulnerable version of Salamander. Successful exploitation would allow remote...

6.8CVSS6.7AI score0.43408EPSS
SaveExploits5
CNVD
CNVD
added 2017/02/10 12:00 a.m.9 views

SVG Salamander Server-Side Request Forgery Security Bypass Vulnerability

SVG Salamander is a JAVA renderer and animator. A security bypass vulnerability exists in SVG Salamander. An attacker could use this vulnerability to bypass security constraints to perform unauthorized operations and launch further attacks...

7.4CVSS6.8AI score0.01992EPSS
SaveExploits0References1
Debian
Debian
added 2017/02/05 5:45 p.m.40 views

[SECURITY] [DSA 3781-1] svgsalamander security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3781-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 05, 2017 https://www.debian.org/security/faq -...

7.4CVSS7.3AI score0.01992EPSS
SaveExploits0
hackapp
hackapp
added 2016/04/01 10:18 a.m.14 views

The King and The Salamander - Base64 encoded String, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application The King and The Salamander published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
seebug.org
seebug.org
added 2014/10/17 12:00 a.m.20 views

Altap Salamander 2.5 PE Viewer 缓冲区溢出漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.32 views

Altap Salamander 2.5 PE Viewer Buffer Overflow

No description provided by source. $Id: altapsalamanderpdb.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

6.8CVSS0.5AI score0.43408EPSS
SaveExploits5
Rows per page
Query Builder