#cwe-918

共收录 2015 条相关情报。

漏洞预警2026-09-22 发布INFO

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in ...

CVE-2026-80149

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB88

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-22 发布INFO

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in ...

CVE-2026-80148

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB88

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-22 发布INFO

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side request forgery guard in pkg/request/ssrf.go passes resolved ...

CVE-2026-79913

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side requ

历史摘要 · 未重新核验 · NVD

#cve #cwe-697 #cwe-918

漏洞预警2026-09-22 发布INFO

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URLs from subscriber credentials.webhookUrl, channel endpoin...

CVE-2026-75511

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URL

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-22 发布INFO

Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs

CVE-2026-75511

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URL

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-09-22 发布INFO

Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses

CVE-2026-79913

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side requ

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-697 #cwe-918

漏洞预警2026-09-22 发布INFO

MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build() library contains a logic error in its readFile guard c...

CVE-2026-95679

MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-918

安全公告2026-09-22 发布INFO

MISP Unauthenticated Blind SSRF via XML Body Processing

CVE-2026-95679

MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20 #cwe-918

漏洞预警2026-09-22 发布INFO

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HT...

CVE-2026-95623

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the in

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-22 发布INFO

Tauri framework v2 SSRF Protection Bypass via HTTP Redirects

CVE-2026-95623

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the in

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-09-21 发布INFO

A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request.

CVE-2026-88403

A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-20 发布INFO

A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d....

CVE-2026-94051

A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulne

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:low

漏洞预警2026-09-20 发布INFO

A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the function ControlFlowNode of the file loca...

CVE-2026-94051

A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-20 发布INFO

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function...

CVE-2026-94038

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:medium

安全公告2026-09-20 发布INFO

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the...

CVE-2026-94040

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderActi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:medium

安全公告2026-09-20 发布INFO

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function...

CVE-2026-94039

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /ap

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:medium

漏洞预警2026-09-20 发布INFO

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderAction of the file app/(app)/apps/settings/actions.ts. Execut...

CVE-2026-94040

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderActi

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PDF Rende...

CVE-2026-94039

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /ap

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-20 发布INFO

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Backend. Such ...

CVE-2026-94038

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-20 发布INFO

vas3k TaxHacker actions.ts testLLMProviderAction server-side request forgery

CVE-2026-94040

A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderActi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918