CVE-2024-10306 Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests

A vulnerability was found in modproxycluster. The issue is that the directive should be replaced by the directive as the former does not restrict IP/host access as Require ip IPADDRESS would suggest. This means that anyone with access to the host might send MCMP requests that may result in...

CVE-2025-27907

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-27907 IBM WebSphere Application Server server-side request forgery

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-2987

IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

PT-2025-17510 · Unknown · Cm Ad Changer

Name of the Vulnerable Software and Affected Versions: CM Ad Changer versions n/a through 2.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.0.5, update to a version later than 2.0.5...

IBM Maximo Asset Management 代码问题漏洞

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from International Business Machines IBM. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for...

PT-2025-16975 · Unknown · Omnissa Uag

Name of the Vulnerable Software and Affected Versions: Omnissa UAG affected versions not specified Description: The issue is related to a Cross-Origin Resource Sharing CORS bypass, which could allow a malicious actor with network access to bypass administrator-configured CORS restrictions and gai...

Server Side Request Forgery (SSRF)

shopxo/shopxo is vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to insufficient input validation and sanitization in multiple places, allowing unauthorized requests and script injection...

PT-2025-15725

Name of the Vulnerable Software and Affected Versions: IndieBlocks versions 0.13.1 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially trick the server into making...

PT-2025-15004

Name of the Vulnerable Software and Affected Versions SwiftXR 3D/AR/VR Viewer versions 1.0.0 through 1.0.7 Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations For versions 1.0.0 through 1.0.7, consider implementing...

CVE-2025-31751

Cross-Site Request Forgery CSRF vulnerability in doit Breaking News WP breaking-news-wp allows Cross Site Request Forgery.This issue affects Breaking News WP: from n/a through = 1.3...

PT-2025-14179 · Unknown · Elementscss Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementsCSS Addons for Elementor versions 1.0.8.7 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially force the server to...

CVE-2025-31117

OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery OOB SSRF vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal...

CVE-2025-31117 OpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) Vulnerability

OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery OOB SSRF vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal...

CVE-2025-31117 OpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) Vulnerability

OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery OOB SSRF vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal...

PT-2025-13810 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.1 Description: An Out-of-Band Server-Side Request Forgery OOB SSRF issue was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. This...

PT-2025-13459

Name of the Vulnerable Software and Affected Versions WP Compress for MainWP versions n/a through 6.30.03 Description The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially manipulate the serve...

PT-2025-13181

Name of the Vulnerable Software and Affected Versions SuitePlugins Video & Photo Gallery for Ultimate Member versions 1.1.2 and earlier Description The issue is a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially...

PT-2025-13155

Name of the Vulnerable Software and Affected Versions Wow-Company Float menu versions n/a through 6.1.2 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that affects the Float menu, allowing unauthorized requests to be made on behalf of the user. Recommendations For versio...

PT-2025-13091

Name of the Vulnerable Software and Affected Versions Nks publish post email notification versions 1.0.2.3 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability that affects the publish post email notification, allowing unauthorized requests to be made...