CWE-918

Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission l

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of perfor

An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request

Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery

The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role

A Server-Side Request Forgery (SSRF) vulnerability exists in the latest version of mintplex-labs/anything-llm, allowing

Import functionality is vulnerable to DNS rebinding attacks between verification and processing of the URL.  Project adm

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to a

SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and maliciou

Microsoft SharePoint Server Information Disclosure Vulnerability

SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes t

txtdot is an HTTP proxy that parses only text, links, and pictures from pages, removing ads and heavy scripts. Prior to

txtdot is an HTTP proxy that parses only text, links, and pictures from pages, removing ads and heavy scripts. Starting

streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb

axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows

Server-Side Request Forgery (SSRF) vulnerability in Firsh Justified Image Grid justified-image-grid.This issue affects J

Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak se

A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allow

A Server-Side Request Forgery (SSRF) vulnerability exists in the jpress <= v5.1.1, which can be exploited by an attacker

Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.p

An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery (SSRF) on SOAR can be used to leak Logpoin

2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Two interconne

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of perfor

Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue a

A Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling-PDF 0.35.1 allows attac

A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive

NextChat is a cross-platform ChatGPT/Gemini UI. There is a Server-Side Request Forgery (SSRF) vulnerability due to a lac

Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions pr

A vulnerability, which was classified as critical, has been found in HaoKeKeJi YiQiNiu up to 3.1. Affected by this issue

A vulnerability classified as critical has been found in 60IndexPage up to 1.8.5. This affects an unknown part of the fi

A vulnerability classified as critical was found in 60IndexPage up to 1.8.5. This vulnerability affects unknown code of

libuv is a multi-platform support library with a focus on asynchronous I/O. The `uv_getaddrinfo` function in `src/unix/g

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random

A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP reques

The W3C XML Signature Syntax and Processing (XMLDsig) specification, starting with 1.0, was originally published with a

** UNSUPPORTED WHEN ASSIGNED ** Server-Side Request Forgery (SSRF) vulnerability in Apache IoTDB Workbench. This issue

A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the fun

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multi

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability i

A vulnerability classified as critical was found in IPC Unigy Management System 04.03.00.08.0027. Affected by this vulne

** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the

The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could

SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's

Server-Side Request Forgery (SSRF) vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize.This issue affects Rapi

The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in ve

An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a re

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t

A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload section of imartinez/privategpt version 0.5