9966 matches found
PT-2025-24182 · Unknown · Nexa Blocks
Name of the Vulnerable Software and Affected Versions: Nexa Blocks versions 1.1.0 and earlier Description: A Server-Side Request Forgery SSRF issue affects Nexa Blocks, allowing for Server Side Request Forgery. Recommendations: For versions 1.1.0 and earlier, update to a version that contains a f...
CVE-2025-5510
A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has be...
Exploit for Missing Authorization in Gitlab
CVE-2023-5612 – GitLab SSRF via Webhook URL PoC & Analysis...
WordPress SocialMark plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by theviper17 in WordPress Plugin SocialMark versions = 2.0.7...
WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by theviper17 in WordPress Plugin Nexa Blocks versions = 1.1.1...
WordPress Car Repair Services Theme <= 5.0 is vulnerable to Server Side Request Forgery (SSRF)
Software Car Repair Services Type Theme Vulnerable versions = 5.0 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Server Side Request Forgery SSRF CVE CVE-2025-30997 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ac927e58431a Credits Bonds Required privilege...
@all-star/base (>=0.17.0, <=0.18.2), @all-star/react (>=0.17.0, <=0.18.2) +163 more potentially affected by CVE-2025-30360 via webpack-dev-server (>=5.0.0, <=5.2.0)
webpack-dev-server NPM version =5.0.0, =0.17.0, =0.17.0, =0.17.0, =18.0.0-next.0, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2-develop-1171, =0.4.0, =0.1.15, =0.0.2, =0.0.2, =0.1.3 and more Source cves: CVE-2025-30360 Source advisory: OSV:GHSA-9JGG-88MC-972H...
CVE-2024-7073
A server-side request forgery SSRF vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the networ...
CVE-2025-37090
A server-side request forgery vulnerability exists in HPE StoreOnce Software...
CVE-2025-48962
CVE-2025-48962 affects Acronis Cyber Protect 16 (Windows and Linux) prior to build 39938. The vulnerability is a Server-Side Request Forgery (SSRF) that can lead to sensitive information disclosure. The root cause, as documented in multiple sources, is tied to SSRF in the product’s handling of ex...
CVE-2025-48962
Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 Windows, Linux before build 39938...
Exploit for Open Redirect in Grafana
CVE-2025-4123 - Grafana Path Traversal Exploit Developed by...
Server-Side Request Forgery (SSRF)
mcp-markdownify-server is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper input validation due to the Markdownify.get function allowing attacker-controlled URLs to be fetched and their responses read via conversion tools like webpage-to-markdown,...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager CVE-2025-27907)
Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...
PT-2025-23805 · Acronis · Acronis Cyber Protect
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions prior to build 39938 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which can lead to sensitive information disclosure. Recommendations: For Acronis Cyber Protect 16...
CVE-2025-5510
A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has be...
CVE-2025-5510 quequnlong shiyi-blog optimize server-side request forgery
A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has be...
CVE-2025-5510
CVE-2025-5510 affects quequnlong shiyi-blog (versions up to 1.2.1). The issue is a server-side request forgery in unknown code at /app/sys/article/optimize triggered by manipulating the url parameter. Exploitation is remote and has been disclosed publicly; vendor did not respond. Remediation guid...
CVE-2025-5510 quequnlong shiyi-blog optimize server-side request forgery
A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has be...