10 matches found
CVE-2025-45250
CVE-2025-45250 Descripción sugerida root@kitploit: MrDoc =0.95 es vulnerable a Server-Side Request Forgery SSRF en la función validateurl del archivo appdoc/utils.py. POC root@kitploit: POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie User-Agent...
CVE-2026-51385
An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...
The vulnerability of the validate_url() function (backend/open_webui/retrieval/web/utils.py) in the Open WebUI AI-based web interface allows a attacker to perform an SSRF attack.
The vulnerability of the validateurl function backend/openwebui/retrieval/web/utils.py in the Open WebUI AI-based web interface is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...
EUVD-2025-13633
Malicious code in bioql PyPI...
CVE-2025-45250
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...
CVE-2025-45250
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...
CVE-2025-45250
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...
CVE-2025-45250
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...
CVE-2025-45250
MrDoc versions 0.95 and before are vulnerable to Server-Side Request Forgery (SSRF) due to a flaw in the validate_url function located in the app_doc/utils.py file. An attacker who is logged into the system can exploit this by sending a malicious request (e.g., via the /upload_doc_img/ endpoint) ...
