10403 matches found
EUVD-2016-8847
Malware in sbrugna...
EUVD-2020-6477
Malware in sbrugna...
EUVD-2017-5826
Malware in sbrugna...
EUVD-2017-1505
Malware in sbrugna...
EUVD-2019-6484
Malware in sbrugna...
EUVD-2017-0348
Malware in sbrugna...
EUVD-2017-3657
Malware in sbrugna...
EUVD-2016-6935
Malware in sbrugna...
EUVD-2019-4588
Malware in sbrugna...
EUVD-2020-16799
Malware in sbrugna...
EUVD-2020-26129
Malware in sbrugna...
EUVD-2020-19347
Malware in sbrugna...
VulnCheck KEV: CVE-2025-55161
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...
CVE-2025-61768 Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload
KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF Server-Side Request Forgery vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external imag...
CVE-2025-61768
KUNO CMS prior to 1.3.15 is affected by an SSRF in the Media module via uploading specially crafted SVGs with external image references. A logged‑in administrator can trigger an outgoing connection to an arbitrary URL, enabling information disclosure or internal network probing. The issue is fixe...
PT-2025-40951
Name of the Vulnerable Software and Affected Versions KUNO CMS versions prior to 1.3.15 Description KUNO CMS is a full-stack blog application. A Server-Side Request Forgery SSRF issue exists in the Media module of the administrative panel. An administrator can upload a specially crafted SVG file...
CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...
CVE-2025-10695
Two unauthenticated diagnostic endpoints in OpenSupports 4.11.0 allow arbitrary backend-initiated connections to an attacker-controlled destination, enabling unauthenticated SSRF for internal network scanning and service interaction. Affected product/version: OpenSupports 4.11.0. Root cause: endp...