EUVD-2019-5495

Malware in sbrugna...

EUVD-2019-4052

Malware in sbrugna...

EUVD-2020-6449

Malware in sbrugna...

EUVD-2014-8866

Malware in sbrugna...

EUVD-2018-0609

Malware in sbrugna...

EUVD-2020-16883

Malware in sbrugna...

EUVD-2019-8545

Malware in sbrugna...

EUVD-2021-26863

Malware in sbrugna...

EUVD-2020-0606

Malware in sbrugna...

EUVD-2014-9126

Malware in sbrugna...

EUVD-2020-27425

Malware in sbrugna...

EUVD-2021-14766

Malware in sbrugna...

EUVD-2020-27432

Malware in sbrugna...

EUVD-2020-19351

Malware in sbrugna...

EUVD-2018-13234

Malware in sbrugna...

CVE-2025-61768 Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload

KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF Server-Side Request Forgery vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external imag...

CVE-2025-61768

KUNO CMS prior to 1.3.15 is affected by an SSRF in the Media module via uploading specially crafted SVGs with external image references. A logged‑in administrator can trigger an outgoing connection to an arbitrary URL, enabling information disclosure or internal network probing. The issue is fixe...

PT-2025-40951

Name of the Vulnerable Software and Affected Versions KUNO CMS versions prior to 1.3.15 Description KUNO CMS is a full-stack blog application. A Server-Side Request Forgery SSRF issue exists in the Media module of the administrative panel. An administrator can upload a specially crafted SVG file...

CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...

CVE-2025-10695

Two unauthenticated diagnostic endpoints in OpenSupports 4.11.0 allow arbitrary backend-initiated connections to an attacker-controlled destination, enabling unauthenticated SSRF for internal network scanning and service interaction. Affected product/version: OpenSupports 4.11.0. Root cause: endp...