Server Side Request Forgery (SSRF)

shopxo/shopxo is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of user-supplied URLs in the image upload function, allowing attackers to craft requests that the server executes on their behalf...

CVE-2025-22374

A Server-Side Request Forgery SSRF vulnerability was discovered in the videx-legacy-ssl web service of Videx’s CyberAudit-Web, affecting versions prior to 1.1.3. This vulnerability has been patched in versions after 1.1.3. Leaving this vulnerability unpatched could lead to unauthorized access to...

CVE-2025-22374 SSRF in CyberAudit-Web videx-legacy-ssl

A Server-Side Request Forgery SSRF vulnerability was discovered in the videx-legacy-ssl web service of Videx’s CyberAudit-Web, affecting versions prior to 1.1.3. This vulnerability has been patched in versions after 1.1.3. Leaving this vulnerability unpatched could lead to unauthorized access to...

CVE-2025-22374

Videx CyberAudit-Web’s videx-legacy-ssl SSRF vulnerability (CVE-2025-22374) affects versions prior to 1.1.3 and is patched in 1.1.3+. The issue could allow unauthorized access to the underlying infrastructure. Documents confirm the affected component and fixed version; exploitation status is not ...

CVE-2025-3412

A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown function of the file 2trainingplatform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The manipulation of the argument url leads to server-side reque...

CVE-2025-3411

A vulnerability, which was classified as critical, has been found in mymagicpower AIAS 20250308. This issue affects some unknown processing of the file 3apiplatform/api-platform/src/main/java/top/aias/platform/controller/AsrController.java. The manipulation of the argument url leads to server-sid...

CVE-2025-0539

In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself...

PT-2025-15971 · Videx · Videx Cyberaudit-Web

Name of the Vulnerable Software and Affected Versions: Videx CyberAudit-Web versions prior to 1.1.3 Description: A Server-Side Request Forgery SSRF vulnerability was discovered in the videx-legacy-ssl web service of Videx’s CyberAudit-Web. This issue could lead to unauthorized access to the...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-xxe-inj-696OZTCm)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request...

WordPress IndieBlocks plugin <= 0.13.1 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin IndieBlocks versions = 0.13.1...

WordPress Waymark plugin <= 1.5.2 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by theviper17 in WordPress Plugin Waymark versions = 1.5.2...

CVE-2025-32691

Server-Side Request Forgery SSRF vulnerability in blubrry PowerPress Podcasting powerpress allows Server Side Request Forgery.This issue affects PowerPress Podcasting: from n/a through = 11.12.6...

CVE-2025-32675

Server-Side Request Forgery SSRF vulnerability in QuantumCloud SEO Help seo-help allows Server Side Request Forgery.This issue affects SEO Help: from n/a through = 6.7.9...

CVE-2025-32487

Server-Side Request Forgery SSRF vulnerability in Joe Waymark waymark allows Server Side Request Forgery.This issue affects Waymark: from n/a through = 1.5.2...

CVE-2025-31009

Server-Side Request Forgery SSRF vulnerability in Jan Boddez IndieBlocks indieblocks allows Server Side Request Forgery.This issue affects IndieBlocks: from n/a through = 0.13.1...

CVE-2025-31009

CVE-2025-31009 : SSRF in IndieBlocks (WordPress plugin) allows unauthenticated requests to trigger server-side requests. Affected: IndieBlocks ≤ 0.13.1. Patch status: Patched. No explicit exploit details or in‑the‑wild data provided.

CVE-2025-31009 WordPress IndieBlocks plugin <= 0.13.1 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Jan Boddez IndieBlocks indieblocks allows Server Side Request Forgery.This issue affects IndieBlocks: from n/a through = 0.13.1...

CVE-2025-31009 WordPress IndieBlocks plugin <= 0.13.1 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Jan Boddez IndieBlocks indieblocks allows Server Side Request Forgery.This issue affects IndieBlocks: from n/a through = 0.13.1...

CVE-2025-32487

CVE-2025-32487 describes a Server-Side Request Forgery (SSRF) in the Waymark WordPress plugin. Affected software is Waymark up to and including version 1.5.2. The CVSS metrics provided indicate a base score of 4.9 (CVSS 3.1) with Network attack vector, High attack complexity, and Low confidential...

CVE-2025-32487 WordPress Waymark plugin <= 1.5.2 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Joe Waymark waymark allows Server Side Request Forgery.This issue affects Waymark: from n/a through = 1.5.2...