Tag
high
advisory
Trigger.dev SSRF via Unvalidated Webhook Delivery URLs
3 rules 7 TTPsAn authenticated user can configure malicious webhook endpoints in Trigger.dev (< 4.5.2) to perform server-side request forgery (SSRF) against internal services and cloud metadata endpoints.
trigger.dev +2
authorization-bypass
insecure-design
cloud-security
web-vulnerability
self-hosted
authentication-bypass
idor
broken-access-control
+1
3r
7t
high
advisory
Arbitrary File Write Vulnerability in PraisonAI Agents
5 TTPs 1 CVEThe FileMemory component in praisonaiagents versions 1.6.52 and earlier fails to sanitize user-supplied identifiers, enabling path traversal attacks that result in arbitrary JSON file creation or overwriting.
praisonaiagents
vulnerability
path-traversal
python
ssrf
cloud-security
authentication-bypass
insecure-design
api-security
5t
1c