CVE-2026-59231

Publié : 31 juillet 2026

Modifié : 31 juillet 2026

Description détaillée

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report client_logo field, which the server-side headless browser fetches while rendering the report.

Références et Patchs

https://github.com/ccyl13/Pentestify/commit/a058a22b42c6311895622645265df79a60265b1d https://github.com/ccyl13/Pentestify/releases/tag/v1.1.1 https://secur0.com/en/cna/cve-list/cve-2026-59231-ssrf-in-pentestify-via-unvalidated-image-urls-cve-id-cve-2026-59231

Dernières Vulnérabilités

CVE-2026-67822

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.

VOIR DÉTAILS

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.

VOIR DÉTAILS

CVE-2026-58047

HTTP Smuggling in cPanel allows potential leak of credentials.

VOIR DÉTAILS