9369 matches found
Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)
Keycloak 12.0.1 and below allows an attacker to force the server to request an unverified URL using the OIDC parameter requesturi. This allows an attacker to execute a server-side request forgery SSRF attack. id: CVE-2020-10770 info: name: Keycloak = 12.0.1 - requesturi Blind Server-Side Request...
SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery
SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...
cve-2026-5147-exp
cve-2026-5147 Exploitation Script For authorized vulnerability validation and lab practice: performs MySQL boolean-based blind injection EXP / INSTR or ASCII and time-based blind injection if + ascii + sleep against SQL injection endpoints, with optional extraction of version, database name,...
CVE-2026-1731
CVE-2026-1731 Blind RCE PoC Effected Versions: Privileged Remote Access : = 24.3.4 Remote Support : = 25.3.1 For further information I recommend you read the analysis by attackerkb.com. How to Build You will need to following tools to build this PoC: Git, rust 1. Clone my repository root@kitploit...
wonderplugin
Wonderplugin Pour RCE N'UTILISEZ PAS CE FAUX PLUGIN SUR VOTRE SERVEUR WEB DE PRODUCTION ! Ce dépôt a pour but de tester une vulnérabilité sur wonderCMS ; ce faux plugin contient un web shell backdoor que vous pouvez trouver dans le fichier evil.php. Article connexe WonderCMS 3.1.3 - Vulnérabilité...
CVE-2025-52021
CVE-2025-52021 — Time-Based Blind SQL Injection в PuneethReddyHC / Online Shopping System Advanced v1.0 CVE: CVE-2025-52021 Название: Time-Based Blind SQL Injection через параметр productid в editproduct.php Вендор / Репозиторий: PuneethReddyHC —...
CVE-2021-24307-all-in-one-seo-pack-admin-rce
Admin PHP unserialization RCE in All in one SEO pack CVE-2021-24307 Simple PoC of an admin authenticated RCE in AISEO = 4.1.0.1 provided as an example. Full write-up here: https://darkpills.com/php-unserialize-write-up-with-admin-rce-in-all-in-one-seo-pack-cve-2021-24307/ Usage: root@kitploit: ph...
CVE-2025-11391
Unauthenticated Blind SQL Injection in PPOM for WooCommerce = 33.0.15 This repository contains a Proof of Concept PoC for an unauthenticated time-based blind SQL Injection vulnerability in the "PPOM for WooCommerce" WordPress plugin, affecting versions up to and including 33.0.15. Vulnerability...
CVE-2023-51810
CVE-2023-51810 Description Blind SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 allows a remote attacker to obtain sensitive information via search parameter in the Users module. Product StackIdeas EasyDiscuss v5.0.5 - EasyDiscuss - Joomla Forum Discussion Tool - StackIdeas...
CVE-2026-23744-POC
Description Cette vulnérabilité existe car MCPJam Inspector expose des points de terminaison d'API internes destinés au débogage et au développement. Ces points de terminaison acceptent des entrées contrôlées par l'utilisateur et les transmettent directement à l'exécution de processus au niveau d...
CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC
CVE-2023-30258 — Magnus Billing v7 Inyección de Comandos PoC Vulnerabilidad de inyección de comandos no autenticados en Magnus Billing v7.3.0. El parámetro GET democ en icepay.php se pasa directamente a una función de shell sin sanitización, permitiendo la ejecución arbitraria de comandos como el...
CVE-2026-41177-Squidex-CMS
CVE-2026-41177: Squidex CMS Blind SSRF Technical research and analysis for CVE-2026-41177: A Blind Server-Side Request Forgery SSRF vulnerability in the Squidex CMS Restore API. Vulnerability Overview CVE ID: CVE-2026-41177 Affected Component: Squidex API: Backup / Restore Engine /api/apps/restor...
CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport
CVE-2025-55971-SSRF-Aveugle-Non-Authentifié-dans-TCL-Smart-TV-UPnP-DLNA-AVTransport Le téléviseur intelligent TCL 65C655, exécutant la version de firmware V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, est vulnérable à une Server-Side Request Forgery SSRF aveugle et non authentifiée via l...
CVE-2026-4112
SonicWall SMA 8200v: Privilege Escalation via Cross-Parameter Blind SQL Injection Firmware: 12.5.0-02283 Platform Hotfix on 12.5.0-02002 Base SonicWall Advisory 1. Summary A post-authentication blind SQL injection vulnerability in the SonicWall SMA 8200v management console port 8443 allows any...
CVE-2025-59528-POC
CVE-2025-59528 - Ejecución Remota de Código en FlowiseAI CustomMCP CVSS 10.0 Crítico | RCE Ciego | FlowiseAI Flowise = 2.2.7-patch.1 y 3.0.6 Resumen Una vulnerabilidad crítica de ejecución remota de código en el nodo CustomMCP de FlowiseAI Flowise. La función convertToValidJSONString pasa la...
WordPress-6.9.1-Blind-SSRF
WordPress-6.9.1-Blind-SSRF El exploit no tiene CVE asignado. Versiones afectadas 6.8 - 6.8.3 6.9 - 6.9.1 WordPress = 6.9.1 - SSRF Ciego no autenticado mediante descubrimiento de Pingback XML-RPC prueba de concepto PoC Uso 1. Instale requests si aún no está instalado pip install requests 2. Cambie...
CVE-2025-69295
CVE-2025-69295 — Vulnerabilidad de inyección SQL ciega en TeconceTheme Coven Core CVE-2025-69295 es una vulnerabilidad de inyección SQL que afecta al componente Coven Core del tema de WordPress TeconceTheme Coven Core. La vulnerabilidad existe debido a una neutralización incorrecta de la entrada...
CVE-2026-24417
CVE-2026-24417: OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service Overview...