https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:49:07 +0000 https://cve.radiocsirt.org/vuln/cve-2024-51981 <p><strong>Affected:</strong> Brother Industries, Ltd HL-L8260CDN, Brother Industries, Ltd HL-L8260CDW, Brother Industries, Ltd HL-L8360CDW, Brother Industries, Ltd HL-L8360CDWT, Brother Industries, Ltd HL-L9310CDW, Brother Industries, Ltd DCP-L8410CDW, Brother Industries, Ltd MFC-L8610CDW, Brother Industries, Ltd MFC-L8690CDW, Brother Industries, Ltd MFC-L8900CDW, Brother Industries, Ltd MFC-L9570CDW and 691 more</p> <p>An unauthenticated attacker may perform a blind server side request forgery (SSRF), due to a CLRF injection issue that can be leveraged to perform HTTP request smuggling. This SSRF leverages the WS-Addressing feature used during a WS-Eventing subscription SOAP operation. The attacker can control all the HTTP data sent in the SSRF connection, but the attacker can not receive any data back from this connection.</p> <p><strong>Affected:</strong> Brother Industries, Ltd HL-L8260CDN, Brother Industries, Ltd HL-L8260CDW, Brother Industries, Ltd HL-L8360CDW, Brother Industries, Ltd HL-L8360CDWT, Brother Industries, Ltd HL-L9310CDW, Brother Industries, Ltd DCP-L8410CDW, Brother Industries, Ltd MFC-L8610CDW, Brother Industries, Ltd MFC-L8690CDW, Brother Industries, Ltd MFC-L8900CDW, Brother Industries, Ltd MFC-L9570CDW and 691 more</p> <p>An unauthenticated attacker may perform a blind server side request forgery (SSRF), due to a CLRF injection issue that can be leveraged to perform HTTP request smuggling. This SSRF leverages the WS-Addressing feature used during a WS-Eventing subscription SOAP operation. The attacker can control all the HTTP data sent in the SSRF connection, but the attacker can not receive any data back from this connection.</p> https://cve.radiocsirt.org/vuln/cve-2024-51981