PT-2026-58100

Name of the Vulnerable Software and Affected Versions Nexus Repository 3 affected versions not specified Description Nexus Repository 3 fails to validate the destination URL configured in the "Webhook: Global" capability before initiating outbound HTTP requests. This allows a user with Capability...

mcp-url-downloader has a Server-Side Request Forgery issue

A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6. Affected by this issue is the function validateurlsafe of the file src/mcpurldownloader/server.py. Such manipulation of the argument url leads to server-side request forgery. The attack...

New API 代码问题漏洞

New API is a QuantumNous open source interface software. A code issue vulnerability exists in New API versions prior to 0.9.0.5 that stems from not properly validating a user-supplied URL, which could lead to a server-side request forgery attack...

EUVD-2020-9338

Malware in sbrugna...

EUVD-2008-4087

Malware in sbrugna...

EUVD-2020-9337

Malware in sbrugna...

EUVD-2021-1041

Malware in sbrugna...

EUVD-2020-12716

Malware in sbrugna...

EUVD-2015-1231

Malware in sbrugna...

EUVD-2015-0018

Malware in sbrugna...

EUVD-2019-9999

Malware in sbrugna...

EUVD-2011-2759

Malware in sbrugna...

EUVD-2019-7974

Malicious code in bioql PyPI...

EUVD-2022-43065

Malicious code in bioql PyPI...

EUVD-2025-10040

Malicious code in bioql PyPI...

EUVD-2024-46244

Malicious code in bioql PyPI...

EUVD-2021-28745

Malicious code in bioql PyPI...

EUVD-2023-44898

Malicious code in bioql PyPI...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2023-42580

Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store...