CVE-2025-15662 Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does not enforce a valid authorization check, allowing unauthenticated attackers to read arbitrary local files including configuration...

CVE-2025-15662

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin (versions before 2.5.3 ) contains a vulnerability where it fails to restrict user-supplied URLs before fetching them server-side and lacks valid authorization checks. This flaw allows unauthenticated attackers to perform...

PT-2026-65356

Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass in gitea.dev...

PT-2026-64873

Kimi Code @moonshot-ai/kimi-code before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call for example via prompt injectio...

PT-2026-64940

Unauthenticated Server Side Request Forgery SSRF in 3D Flipbook PDF Viewer & Embedder = 1.4.2 versions...

PT-2026-65112

JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery SSRF. An authenticated user - or, if anonymous access is enabled on the repository, an unauthenticated user - could cause Artifactory to issue outbound HTTP requests to arbitrary...

PT-2026-65314

Name of the Vulnerable Software and Affected Versions Simple Link Directory Pro versions prior to 15.0.7 Description An unauthenticated Server Side Request Forgery SSRF exists in the plugin. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an...

PT-2026-64964

Contributor Server Side Request Forgery SSRF in Feedzy = 5.2.4 versions...

PT-2026-65321

Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...

PT-2026-65097

A Server-Side Request Forgery SSRF and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page tool of googleapis/mcp-toolbox. The tool takes an unvalidated pageURL parameter from the client and issues an HTTP GET request to it using an authenticated client. The...

PT-2026-65111

Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description A URL validation weakness in the handling of Ansible repositories could allow a user, under specific repository access conditions, to trigger unintended server-side requests. This...

PT-2026-64920

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to bound the time and resource consumption of server-side document content extraction which allows an authenticated user with file-upload permission to degrade file uploads for all users on the server v...

Linux Distros Unpatched Vulnerability : CVE-2026-13071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript...

PT-2026-65372

Gitea: SSRF via HTTP Redirect in Repository Migration in code.gitea.io/gitea...

Next.js Framework 12.x < 15.5.21 / 16.x < 16.2.11 SSRF

The Next.js Framework on the remote host is affected by a server-side request forgery vulnerability: - A rewrites or redirects rule that builds its external destination hostname from request-controlled input can be pointed at an arbitrary hostname, regardless of the rule's hostname suffix. For a...

ROS-20260727-73-0018

A vulnerability in Gitea related to insufficient validation of incoming requests. Exploitation of this vulnerability could allow a remote attacker to carry out an SSRF attack...

CVE-2026-64648: Use of Cache Containing Sensitive Information

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the...

Linux Distros Unpatched Vulnerability : CVE-2026-13066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being...

Next.js Framework 14.1.1 < 15.5.21 / 16.x < 16.2.11 SSRF

The Next.js Framework on the remote host is affected by a server-side request forgery vulnerability: - When a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host Server-Side Request Forgery. This requires the attacker's...

CVE-2026-17458 mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack...