Search Vulnerabilities

HomeBox affected by Blind SSRF

ZimaOS is vulnerable to Server-Side Request Forgery (SSRF)

Chamilo: Blind Server-Side Request Forgery (Unauth Blind SSRF)

Chamilo: Potential unauthenticated blind SSRF via openid function

Featured Image from Content < 1.7 Authenticated SSRF via save_post

Statamic Vulnerable to Server-Side Request Forgery via Glide

Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing

Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)

XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)

itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery

psi-probe PSI Probe Whois Whois.java lookup server-side request forgery

Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

ZITADEL has potential SSRF via Actions

TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist

Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API

OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field

LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

feiyuchuixue sz-boot-parent download server-side request forgery