Rocket.Chat: SSRF via Improper Redirect Validation in Rocket.Chat oEmbed Function

A vulnerability was discovered in Rocket.Chat version 7.10.1 where the oEmbed feature did not properly validate redirected URLs. This allowed an attacker to bypass SSRF protections and access internal network resources that would otherwise be unreachable...

CVE-2025-36565

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a...

Texas Instruments Fusion Digital Power Designer 安全漏洞

Texas Instruments Fusion Digital Power Designer is a digital power design tool from Texas Instruments. A security vulnerability exists in Texas Instruments Fusion Digital Power Designer version 7.10.1, which originated from a vulnerability that allows a local attacker to gain access to sensitive...

Elasticsearch Information Disclosure Vulnerability (CNVD-2021-03548)

Elasticsearch is a search engine based on the Lucene library. An information disclosure vulnerability exists in the asynchronous search API in Elasticsearch 7.7.0 - 7.10.1. The vulnerability stems from the fact that users performing asynchronous searches will incorrectly store HTTP headers. An...

CVE-2019-14225

OX App Suite 7.10.1 and 7.10.2 allows SSRF...

Open-Xchange AppSuite Information Disclosure Vulnerability (CNVD-2019-12910)

Open-Xchange AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An information disclosure vulnerability exists in Open-Xchange AppSuite 7.10.1 and prior versions, which arises from...