Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•35 views

PT-2026-105848

Environment - Project: sooperset/mcp-atlassian - Affected function: validate url for ssrf - Affected path: header-based Jira/Confluence URL authentication flow - Tested endpoint: POST /mcp - Tested version: 2.14.5 Description The SSRF protection in validate url for ssrf can be bypassed with a URL...

8.8CVSS6AI score0.0033EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96923

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description The software is susceptible to Server-Side Request Forgery SSRF, a condition where an attacker can induce the server to make requests to an unintended location. The validate url for ssrf...

7.5CVSS5.8AI score0.003EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•18 views

PT-2026-97054

Name of the Vulnerable Software and Affected Versions e621ng versions prior to 26.09.16 Description Untrusted request parameters are passed directly to the Rails url for function within the PaginatorComponent and controller navigation links. This allows attackers to manipulate pagination and...

6.1CVSS5.8AI score0.00336EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/10/23 12:00 a.m.•5 views

PT-2025-43525

Name of the Vulnerable Software and Affected Versions axewater sharewarez version 2.4.3 Description A Host Header Injection flaw exists in the password reset functionality of the software. This allows remote attackers to potentially take over accounts by manipulating the Host header during passwo...

7.1CVSS6.1AI score0.0045EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•7 views

CVE-2022-26324: Improper Neutralization of Input During Web Page Generation

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000...

7.6CVSS5.6AI score0.00303EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/08/03 12:00 a.m.•8 views

PT-2018-11286

Name of the Vulnerable Software and Affected Versions GitLab Community Edition and Enterprise Edition versions 10.7.x through 10.7.5 Description An issue was discovered due to the usage of url for which contained a XSS issue. This was caused by url for allowing arbitrary protocols as a parameter...

5.4CVSS0.00658EPSS
SaveExploits1References6
OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•39 views

Fedora Update for WebKit FEDORA-2008-3415

Check for the Version of WebKit OpenVAS Vulnerability Test Fedora Update for WebKit FEDORA-2008-3415 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

6.8CVSS0.3AI score0.04614EPSS
SaveExploits2References2
Rows per page
Query Builder