A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function...
CVE-2026-116094
A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file applic
#cwe-918
共收录 2014 条相关情报。
← 返回所有主题A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file application/function.php. Executing a manipulation can lead to ...
CVE-2026-116094
A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file applic
A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function...
CVE-2026-116056
A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe of the file app/func
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that...
CVE-2026-116205
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows...
CVE-2026-116192
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attacker
phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export...
CVE-2026-116182
phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches exter
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows...
CVE-2026-116176
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outb
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch arbitrary URLs by supplying [[|URL]] wiki syntax...
CVE-2026-116205
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers
phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches external images referenced in FAQ answers. Attackers who can i...
CVE-2026-116182
phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches exter
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound connections by embedding a decode address in the X-R...
CVE-2026-116176
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outb
Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS...
CVE-2026-116066
Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects...
CVE-2026-116000
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_f
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and Ge...
CVE-2026-115886
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
CVE-2026-115886
### Summary MLflow's tracking server exposes `POST /ajax-api/3.0/mlflow/scorer/invoke` with **no authentication**, and t
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server...
CVE-2026-115813
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier migh
Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle...
CVE-2026-115810
Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows aut
Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to is...
CVE-2026-115810
Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows aut
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, the DownloadTaskEndpoint WebSo...
CVE-2026-46651
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.0
PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again w...
CVE-2026-57114
PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API valid
Event Schedule is an open-source platform to share events, sell tickets and bring communities together. In versions 1.0.0 and prior, App\Utils\UrlUtils::isUrlSafe() is the SSRF ...
CVE-2026-55190
Event Schedule is an open-source platform to share events, sell tickets and bring communities together. In versions 1.0.