SSRF

Zero Day Initiative discloses SSRF-to-RCE in Oracle PeopleSoft
Trend Micro’s Zero Day Initiative details three PeopleSoft flaws, including an SSRF that can be chained to remote code execution.

CISA lists nine Anjvision YSSD-RTMP-H5 flaws with no fix planned
CISA says the worst of the nine vulnerabilities scores 9.8 and could give an attacker full control of the device, and that the vendor has not responded.