Search Vulnerabilities

Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects

mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery

Data Quality Elevation of Privilege Vulnerability

Quay: ssrf in red hat quay notification webhooks (slack/generic)

Multiple Security Vulnerabilities in Snowflake libsnowflakeclient

Azure AI Search Elevation of Privilege Vulnerability

9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch

Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability

WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability

WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability

WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability

WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions

RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX

n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters

Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader

Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass

Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck