Vulnerabilities
Kanbn 0.6.0 Vulnerable to Unauthenticated SSRF via Incomplete Fix
An incomplete patch for a prior flaw in Kanbn versions up to 0.6.0 allows unauthenticated attackers to forge server-side requests and access internal data.
CWE-918
Everything Threat Times has reported about CWE-918: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Dromara Skyeye Patched for Critical SSRF and Auth Bypass Vulnerability
A critical flaw in Dromara Skyeye allows unauthenticated attackers to overwrite files and access internal resources via a callback endpoint.