Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo

Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetch_ssl_certificate=true with crafted userinfo URLs so SSLCertificate.from_url connects to internal hosts on port 443, probing reachability and leaking certificate details.

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypass via Pay-Later Orders

Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authenticated customers to bypass coupon usage limits because usage is counted only when orders become paid. Attackers can place multiple pay-later orders while a usage remains, or cancel paid orders to inflate max_usage, gaining unlimited discounts.

Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints

Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve quote addresses, totals, contact details, and product pricing belonging to any user or lead.

AIOHTTP: Absolute-form request targets can spoof Request.scheme

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme for security decisions can consequently be tricked into treating an unencrypted connection as encrypted or an encrypted connection as unencrypted. This issue is fixed in version 3.14.4.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.

This candidate was in a CNA pool that was not assigned to any issues.