#cwe-918

共收录 2014 条相关情报。

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger server requests by sending signed Follow activities to...

CVE-2026-104463

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigg

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticated attackers to trigger HTTPS requests to internal hosts. ...

CVE-2026-104459

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticate

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in validateKeyIdUrl() that allows unauthenticated attackers to bypass the SSRF guard using 6to4, NAT64,...

CVE-2026-104458

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in validateKeyIdUrl() that allows unauthentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a sy...

CVE-2026-104442

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via th...

CVE-2026-104441

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to make arbitrary server-side requests via the idtypeannonc...

CVE-2026-104440

YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter

CVE-2026-104464

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox

CVE-2026-104463

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigg

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle

CVE-2026-104459

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticate

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses

CVE-2026-104458

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in validateKeyIdUrl() that allows unauthentica

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action

CVE-2026-104442

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action

CVE-2026-104441

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter

CVE-2026-104440

YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-10-02 发布INFO

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: be...

CVE-2026-80464

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request F

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-10-02 发布INFO

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp...

CVE-2026-104120

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:medium

漏洞预警2026-10-02 发布INFO

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch_url of the file mcp_...

CVE-2026-104120

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-10-01 发布INFO

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not...

CVE-2026-100251

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:medium

漏洞预警2026-10-01 发布INFO

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler fetches a user-supplied U...

CVE-2026-56661

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-01 发布INFO

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler in UpdateCE.php downloads...

CVE-2026-56660

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-434 #cwe-918

漏洞预警2026-10-01 发布INFO

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access in...

CVE-2026-100251

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay

历史摘要 · 未重新核验 · NVD

#cve #cwe-918