CVE-2023-20061 Cisco Unified Intelligence Center Vulnerabilities

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery SSRF attack on an affected system. Cisco plans to release software updates that address these vulnerabilities...

WordPress Instant Images Plugin <= 5.1.0.2 is vulnerable to Server Side Request Forgery (SSRF)

Software Instant Images Type Plugin Vulnerable versions = 5.1.0.2 Fixed in 5.2.0 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-27451 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID 7950e8634dee Credits Universe Required...

Instant Images < 5.2.0 - Author+ SSRF

The plugin does not validate a parameter before making a request to it, which could allow users with Author role and above to perform SSRF attack...

RHEL 7 : Red Hat Single Sign-On 7.6.2 security update on RHEL 7 (Important) (RHSA-2023:1043)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1043 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

CXF: SSRF Vulnerability

A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...

CVE-2023-20061

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery SSRF attack on an affected system. Cisco plans to release software updates that address these vulnerabilities...

Cisco Unified Intelligence Center Vulnerabilities

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery SSRF attack on an affected system. Cisco plans to release software updates that address these vulnerabilities. Ther...

SSRF Vulnerability in WebVPN Resource Access Control System of Beijing Netrexport Technology Co.

WebVPN Resource Access Control System is a tool that provides users with easy client-free access to resources. Ltd. WebVPN Resource Access Control System suffers from SSRF vulnerability, which can be exploited by attackers to probe intranet information and obtain sensitive information...

RHEL 9 : Red Hat Single Sign-On 7.6.2 security update on RHEL 9 (Important) (RHSA-2023:1045)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1045 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

Exploit for Server-Side Request Forgery in Fusion_Builder_Project Fusion_Builder

CVE-2022-1386 - Fusion Builder Interactsh Server " U...

CVE-2023-1046 MuYuCMS getFile.html server-side request forgery

A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-1046 MuYuCMS getFile.html server-side request forgery

A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-1046

CVE-2023-1046 affects MuYuCMS 2.2, with the vulnerability located in an unknown part of /admin.php/update/getFile.html. The manipulation of the url parameter enables server-side request forgery (SSRF) and can be exploited remotely; the exploit has been disclosed publicly. Other connected sources ...

Rocket.Chat: Unauthenticated full-read SSRF via Twilio integration

A Server-Side Request Forgery SSRF vulnerability was discovered in the Twilio webhook endpoint of Rocket.Chat before version 6.10.1. The vulnerability allowed unauthenticated full-read access...

Debian: Security Advisory (DLA-3336-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-37938

CVE-2022-37938 is an unauthenticated server-side request forgery (SSRF) affecting HPE Serviceguard Manager. The available connected sources confirm the issue as an SSRF affecting Serviceguard Manager, with critical impact indicators (C/I/A set to HIGH in CVSS 3.1) and network access, no user inte...

CVE-2022-37938

Unauthenticated server side request forgery in HPE Serviceguard Manager...

Checkmk 2.1.x < 2.1.0p12 SSRF Vulnerability

Checkmk is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

K16090693: Apache HTTP server vulnerability CVE-2021-44224

Security Advisory Description A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint...

K61974123: ImageMagick vulnerability CVE-2016-3718

Security Advisory Description The 1 HTTP and 2 FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery SSRF attacks via a crafted image. CVE-2016-3718 Note : This vulnerability is one of the series of vulnerabilities known as...