5781 matches found
CVE-2026-63642
A flaw was found in MagicMirror². A remote attacker can exploit an unauthenticated Socket.IO notification in the newsfeed module by providing a malicious, unvalidated URL. This allows for Server-Side Request Forgery SSRF, enabling the attacker to identify internal network hosts and ports, and...
CVE-2026-76225
ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the ArcadeDB...
CVE-2026-76225
ArcadeDB before 26.8.1 has a server-side request forgery flaw in its OpenCypher LOAD CSV implementation, which does not validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the server fetch and retu...
PT-2026-78788
Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Administrator role can perform Server-Side Request Forgery SSRF—a technique where an attacker forces a server to make requests to an unintended location—via the...
CVE-2026-20337 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20337 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-20338 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20338 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-20339 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20339 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-20348 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20348 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2026-53801
rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...
Exploit for CVE-2026-15748
CVE-2026-15826, CVE-2026-15748 Donate Support the mainten...
9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint
Summary A Server-Side Request Forgery SSRF vulnerability exists in the 9Router dashboard via the /api/auth/oidc/test endpoint. The application accepts a user-controlled URL string through the issuerUrl parameter and performs an outbound HTTP request without validating if the destination IP belong...
GHSA-8G4W-4FFG-8VGX 9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint
Summary A Server-Side Request Forgery SSRF vulnerability exists in the 9Router dashboard via the /api/auth/oidc/test endpoint. The application accepts a user-controlled URL string through the issuerUrl parameter and performs an outbound HTTP request without validating if the destination IP belong...
CVE-2026-56677
9Router 0.5.4 and earlier is vulnerable to unauthenticated SSRF: the POST /api/auth/oidc/test endpoint passes a user-supplied issuerUrl to fetchOidcDiscovery() without blocking private/loopback IPs, allowing internal service scanning and reflection of OIDC discovery fields (token_endpoint, jwks_u...
CVE-2026-56677 9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint
9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl parameter to fetchOidcDiscovery in src/lib/auth/oidc.js without restricting private or loopback destinations, allowing...
preflight v0.20.1
Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...
CVE-2026-16268
creationtimestamp| type| source ---|---|--- 2026-08-17 06:00:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-16268.yaml 2026-08-18 00:00:03+00:00| confirmed|...
BIT-GHOST-2026-70591 Ghost: Server-Side Request Forgery in Image Fetching
Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image fetching allowed any staff-level user to perform a blind HTTP GET request against internal hosts. No output was returned, but this could have been used to probe open ports on...
9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint
A Server-Side Request Forgery SSRF vulnerability exists in the 9Router dashboard via the /api/auth/oidc/test endpoint. The application accepts a user-controlled URL string through the issuerUrl parameter and performs an outbound HTTP request without validating if the destination IP belongs to a...
PT-2026-76735
Name of the Vulnerable Software and Affected Versions sqlparse versions prior to 0.6.0 Description sqlparse contains a Regular Expression Denial of Service ReDoS issue where the lexer repeatedly scans unmatched dollar-quoted literals and multiline-comment delimiters. This occurs because the regex...