attack_type:ssrf × latest_source_host:yokai.hakaisecurity.io × limpar

Resultados

2 casos · pág. 1/1

yokai.hakaisecurity.io · há 1d medium

SSRF flaws CVE-2026-63642 and CVE-2026-63643 in MagicMirror² newsfeed and calendar modules, fixed in 2.37.0

The Yokai Research Team at Hakai Security disclosed two Server-Side Request Forgery (SSRF) vulnerabilities in MagicMirror², an open-source smart mirror platform: CVE-2026-63642 (blind SSRF in the newsfeed module) and CVE-2026-63643 (SSRF in the calendar module). Both let a client make the MagicMirror² server send HTTP requests to attacker…

CVE-2026-63642 CVE-2026-63643

yokai.hakaisecurity.io · há 1d high

Nine 0-days in HTML-to-PDF libraries: ReportLab RCE, ReLaXed RCE, WeasyPrint SSRF/LFR, mPDF, Dompdf and TCPDF flaws

Researcher Pedro Cruz (Hakai Security / The Hacking Club) disclosed nine vulnerabilities in widely used server-side PDF generation libraries, with a combined footprint of over 90 million monthly installs. The cases range from RCE (ReportLab, ReLaXed) through arbitrary file read and SSRF (WeasyPrint, Browsershot) to DoS and file/directory …

CVE-2024-28184 CVE-2025-68616 CVE-2026-55555