#cwe-918

共收录 2015 条相关情报。

漏洞预警2026-09-03 发布INFO

PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality. When only_global_lookup is enabled, the application validat...

CVE-2026-85242

PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality. Wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-03 发布INFO

Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.

CVE-2026-84761

Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-03 发布INFO

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the manage...

CVE-2026-75036

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet co

历史摘要 · 未重新核验 · NVD

#cve #cwe-918 #cwe-1336

漏洞预警2026-09-03 发布INFO

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts. An attacker ca...

CVE-2026-85180

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to r

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-03 发布INFO

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadat...

CVE-2026-85179

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to interna

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-03 发布INFO

Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing

CVE-2026-75036

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet co

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1336 #cwe-918

安全公告2026-09-03 发布INFO

Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect

CVE-2026-85180

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to r

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-09-03 发布INFO

Label Studio through 1.23.0 SSRF via Unvalidated Webhook URL

CVE-2026-85179

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to interna

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-09-03 发布MEDIUM

n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exposed to Code and Function nodes. The validation logic che...

CVE-2026-85172

n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exp

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-09-03 发布INFO

WWBN AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the set_api_userImages API endpoint that fails to validate profileImg and background...

CVE-2026-85164

WWBN AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the set_api_userImages API

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-03 发布INFO

AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the EPG parser that allows authenticated uploaders to fetch arbitrary internal URLs. An a...

CVE-2026-85163

AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the EPG parser that allows authe

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-03 发布INFO

A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/app/artifacts/index.tsx of the componen...

CVE-2026-85106

A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-03 发布INFO

Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient validation of the HTTPS_SERV and FILE_SERV parameters. A...

CVE-2026-76177

Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-03 发布INFO

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could ...

CVE-2026-74768

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-03 发布INFO

n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass

CVE-2026-85172

n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exp

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-09-02 发布INFO

Plate: SSRF with response disclosure in DOCX image embedding

CVE-2026-65842

## Summary `@platejs/docx-io` can fetch remote image URLs while converting HTML to DOCX. When an application converts a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-918 #severity:high

安全公告2026-09-02 发布INFO

link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897

CVE-2026-61704

The existing advisory GHSA-4gp8-rjrq-ch6q / CVE-2026-43897 states that the SSRF issue was fixed in 4.0.1. However, 4.0.3

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-918 #severity:high

安全公告2026-09-02 发布INFO

BIG-IP has a vulnerability where an authenticated user of any role may be able to create...

CVE-2026-66842

BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:high

漏洞预警2026-09-02 发布INFO

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an...

CVE-2026-84377

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6 and 1.96.

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-02 发布INFO

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

CVE-2026-84377

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6 and 1.96.

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918