https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 21:03:55 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-244897 EUVD-2026-244897 https://cve.radiocsirt.org/vuln/euvd-2026-244897 https://cve.radiocsirt.org/vuln/fkie_cve-2024-0649 <p>A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical. This issue affects the function download_network_image of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251375.</p> <p>A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical. This issue affects the function download_network_image of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251375.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-0649 https://cve.radiocsirt.org/vuln/ghsa-286q-c3p5-x28w <p>A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical. This issue affects the function download_network_image of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251375.</p> <p>A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical. This issue affects the function download_network_image of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251375.</p> https://cve.radiocsirt.org/vuln/ghsa-286q-c3p5-x28w https://cve.radiocsirt.org/vuln/gsd-2024-0649 gsd-2024-0649 https://cve.radiocsirt.org/vuln/gsd-2024-0649