#cwe-918

共收录 2014 条相关情报。

漏洞预警2026-10-11 发布INFO

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots...

CVE-2026-108770

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-10-11 发布INFO

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that...

CVE-2026-108850

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated at

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:medium

漏洞预警2026-10-11 发布INFO

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescap...

CVE-2026-108850

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated at

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-10-11 发布INFO

Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markup

CVE-2026-108850

Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated at

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-10-11 发布INFO

Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed's proxy_url. Atta...

CVE-2026-108735

Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to rea

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-11 发布INFO

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callback_url ex...

CVE-2026-108719

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reac

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-10-11 发布INFO

Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL

CVE-2026-108735

Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to rea

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-10-11 发布INFO

LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url

CVE-2026-108719

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reac

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-10-11 发布INFO

A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controllers/cas.go of the component Proxy Val...

CVE-2026-108572

A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-10-11 发布INFO

Casdoor Proxy Validation cas.go CasP3ProxyValidate server-side request forgery

CVE-2026-108572

A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-10-11 发布INFO

A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request H...

CVE-2026-108542

A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-11 发布INFO

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse AP...

CVE-2026-108523

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-10-11 发布INFO

A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is...

CVE-2026-108521

A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemot

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:low

漏洞预警2026-10-11 发布INFO

A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the c...

CVE-2026-108521

A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemot

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-10 发布INFO

Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.

CVE-2026-62030

Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-10 发布INFO

Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.

CVE-2026-27350

Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This i

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-10 发布INFO

Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal ser...

CVE-2026-108602

Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-10 发布INFO

Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider h...

CVE-2026-108594

Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch tha

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-10-10 发布INFO

Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch

CVE-2026-108594

Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch tha

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-10-10 发布INFO

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches U...

CVE-2026-108583

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach int

历史摘要 · 未重新核验 · NVD

#cve #cwe-918