#cwe-918

共收录 2023 条相关情报。

← 返回所有主题

漏洞预警2026-08-11 发布INFO

A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network ...

CVE-2026-72597

A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-11 发布INFO

A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRF_PROTECTION_ENABLED is set to false by default. The import-from-UR...

CVE-2026-72560

A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRF_PROTECTI

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-11 发布INFO

A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or exter...

CVE-2026-72552

A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-11 发布INFO

A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbi...

CVE-2026-50237

A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace t

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-11 发布INFO

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutra...

CVE-2026-50236

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-11 发布INFO

A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software cus...

CVE-2026-13739

A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability relate

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-11 发布INFO

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoints. The URL validation routine checked whether a suppl...

CVE-2026-73160

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoi

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-11 发布INFO

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller also choose the HTTP...

CVE-2026-19516

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the graf

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-10 发布INFO

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-beta.1, PrivateAddressCheck.private_address? in app/lib/pri...

CVE-2026-72916

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-be

历史摘要 · 未重新核验 · NVD

#cve #cwe-918 #cwe-1286

漏洞预警2026-08-10 发布INFO

The webhook URL validator in `website/notifications/webhooks.py` uses `ip.is_global` to reject non-public addresses after DNS resolution. IPv6 transition addresses (NAT64 `64:ff...

CVE-2026-72761

The webhook URL validator in `website/notifications/webhooks.py` uses `ip.is_global` to reject non-public addresses afte

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-10 发布INFO

A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or ...

CVE-2026-72591

A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make t

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-10 发布INFO

A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perform HTTP requests t...

CVE-2026-72581

A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-10 发布INFO

A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the ser...

CVE-2026-72566

A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authent

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-08-10 发布INFO

A security vulnerability has been detected in adafap api-mcp up to...

CVE-2026-19374

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affect

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:medium

安全公告2026-08-10 发布INFO

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects...

CVE-2026-19375

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_arti

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:low

安全公告2026-08-10 发布INFO

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this...

CVE-2026-19373

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function make

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:low

安全公告2026-08-10 发布INFO

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the...

CVE-2026-12372

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. Th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:low

漏洞预警2026-08-10 发布INFO

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_article of the file news_scraper_mcp/server.py. The manipulat...

CVE-2026-19375

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_arti

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-09 发布INFO

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/rout...

CVE-2026-19374

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affect

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-09 发布MEDIUM

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseCon...

CVE-2026-19373

CVE-2026-19373 涉及 PhialsBasement KoboldCPP-MCP-Server 1.0.0 中的一个服务端请求伪造（SSRF）漏洞。该漏洞源于 src/index.ts 文件中的 makeRequest 函数，其

历史摘要 · 未重新核验 · NVD

#cve #cwe-918