Abstrium Pydio Cells 代码问题漏洞

Abstrium Pydio Cells is a next-generation file-sharing platform developed in the Go language by French company Abstrium. A security vulnerability exists in Abstrium Pydio Cells 4.1.2 and earlier versions, which stems from the presence of server-side request forgery...

Vip Video Analysis 代码问题漏洞

Vip Video Analysis is a vip video parsing application by yiwen personal developer. A code issue vulnerability exists in Vip Video Analysis version 1.0, which stems from a server-side request forgery due to misuse of the parameter titurl...

Contec CONPROSYS HMI System 代码问题漏洞

Contec CONPROSYS HMI System is an HTML5-based HMI Human Machine Interface/SCADA Supervisory Control and Data Acquisition software product from Contec Japan. A security vulnerability exists in Contec CONPROSYS HMI System versions prior to 3.5.3 that stems from a server-side request forgery...

CVE-2023-2287

The Orbit Fox by ThemeIsle WordPress plugin before 2.10.24 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user may force the server to access any URL of their choosing...

PT-2023-22228 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: JIZHICMS version 2.4.5 Description: A critical issue has been found, affecting the index function of the TemplateController.php file. The manipulation of the webapi argument leads to server-side request forgery, allowing for remote attacks...

Nextcloud 代码问题漏洞

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Mail that originates from an SSRF attack that could allow GET requests to be sent to services running in the...

JIZHICMS 代码问题漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from China's Extreme Networks Technology Company. A code issue vulnerability exists in JIZHICMS version 2.4.5, which stems from a problem with the file TemplateController.php, where manipulation of th...

PT-2023-24201 · Nextcloud +1 · Nextcloud Mail +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Mail versions prior to 1.15.3 Nextcloud Mail versions prior to 2.2.5 Nextcloud Mail versions prior to 3.02 Description: A blind SSRF attack in Nextcloud Mail allowed sending GET requests to services running in the same web server...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a attacker to perform an SSRF attack.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack by loading a specially created XML file...

CVE-2023-20174

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery SSRF attack through an affected device. To exploit these vulnerabilities, an attacker...

Cisco Identity Services Engine 代码问题漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An XML external entity injection vulnerability...

CVE-2023-20174

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery SSRF attack through an affected device. To exploit these vulnerabilities, an attacker...

CVE-2023-20173

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery SSRF attack through an affected device. To exploit these vulnerabilities, an attacker...

PT-2023-23488 · Davinci · Davinci

Name of the Vulnerable Software and Affected Versions: davinci version 0.3.0-rc Description: The issue is related to Server-side request forgery SSRF. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2023-23169

Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal...

pdfocus 代码问题漏洞

pdfocus is simple and secure PDF conversion. A security vulnerability exists in Synapsoft pdfocus version 1.17, which stems from the system's susceptibility to local file inclusion, server-side request forgery, and directory traversal...

PT-2023-18870 · Synapsoft · Synapsoft Pdfocus

Name of the Vulnerable Software and Affected Versions: Synapsoft pdfocus version 1.17 Description: The issue concerns local file inclusion and server-side request forgery Directory Traversal. Recommendations: For Synapsoft pdfocus version 1.17, consider restricting access to sensitive files and...

PT-2023-3009 · Unknown · Conprosys Hmi System

Name of the Vulnerable Software and Affected Versions: CONPROSYS HMI System CHS versions prior to 3.5.3 Description: A server-side request forgery issue exists, allowing an attacker with administrative privileges to bypass database restrictions and connect to unintended databases. The vulnerabili...

CVE-2022-29840

Server-Side Request Forgery SSRF vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This...

PT-2023-12986 · Western Digital · Western Digital My Cloud Os 5

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud OS 5 versions prior to 5.26.202 Description: A Server-Side Request Forgery SSRF issue was identified, which could allow a rogue server on the local network to modify its URL to point back to the loopback adapter. This...