887 matches found
grafana-ssrf
grafana-ssrf Grafana में प्रमाणित SSRF। नोट्स सभी SSRFS में Azure मेटाडेटा हेडर जोड़ा गया है सभी SSRFS में Google मेटाडेटा हेडर जोड़ा गया है SSRF किसी भी स्थिति में रीडायरेक्ट का पालन नहीं करेगा, इसलिए सुनिश्चित करें कि url सीधा है। यदि लॉगिन SSO या अन्य गैर-ग्राफाना लॉगिन के माध्यम से है, तो कृप...
CVE-2026-33340
CVE-2026-33340: lollms-webui में SSRF अवलोकन क्षेत्र| विवरण ---|--- CVE ID| CVE-2026-33340 भेद्यता| सर्वर-साइड अनुरोध जालसाजी SSRF प्रभावित उत्पाद| ParisNeo/lollms-webui LoLLMs WEBUI गंभीरता| गंभीर — CVSS 9.1 CVSS वेक्टर| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-918: सर्वर-साइड अनुरो...
CVE-2026-64849.yaml
id: CVE-2026-64849 info: name: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass author: DhiyaneshDk severity: critical description: | يحتوي MLflow 3.15.0 على ثغرة كشف معلومات ناتجة عن التحقق غير السليم من عناوين URL الخاصة بالخطافات webhooks مما يسمح للمهاجمين بالوصول إلى الخدم...
CVE-2026-45019
Chainlit (a Python framework for building conversational AI applications) is affected by an SSRF vulnerability in its MCP integration. From version 2.4.0rc0 to 2.12.0 , deployments with features.mcp.enabled = true expose the POST /mcp endpoint without authentication. For SSE and streamable-http t...
CVE-2026-79659
Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata...
CVE-2026-79671
Ech0 versions through 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the validateWebhookURL function (webhook_setting_service.go). The validation only rejects literal IP addresses via net.ParseIP() but fails to reject hostnames that DNS-resolve to private or internal addresse...
EUVD-2026-65455
Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata...
CVE-2026-79659 Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo
Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata...
CVE-2026-79659
Ech0 before 4.7.3 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the fetchPeerConnectInfo function. The root cause is the use of unvalidated HTTP requests instead of safe request methods with URL validation. An authenticated attacker can supply arbitrary URLs to reach intern...
nextjs-cve-2026-44578
nextjs-cve-2026-44578 قوالب Nuclei لكشف CVE-2026-44578 ثغرة SSRF في ترقية WebSocket في Next.js مع التحقق من صحة البيانات الوصفية متعددة السحابات، وأخذ بصمات Next.js، وسير العمل المسحي في العالم الحقيقي. يتضمن إشارات إلى أداة NextSSRF الأصلية وأبحاث الاستغلال. NextSSRF Nuclei Templates قوالب Nucle...
EUVD-2026-65395
Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...
FormCraft3 <= 3.9.15 - Server-Side Request Forgery
Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions. id: CVE-2026-65442 info: name: FormCraft3 = 3.9.15 - Server-Side Request Forgery author: DhiyaneshDk severity: high description: | Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...
Gotenberg <= 8.30.1 - Server Side Request Forgery
Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-sensitive regular expression ^https?:// to match URL schemes. Because Go's net/url.Parse normalizes...
MagicMirror <= 2.35.0 - Server-Side Request Forgery
An unauthenticated Server-Side Request Forgery SSRF vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP requests to internal networks, cloud metadata services, and localhost services. The endpoint also expands environment...
Kan <= 0.5.4 - Server-Side Request Forgery
Kan, an open-source project management tool Trello alternative, versions 0.5.4 and below are vulnerable to an unauthenticated Server-Side Request Forgery in the /api/download/attatchment endpoint. The endpoint passes the attacker-controlled url query parameter straight to a server-side fetch...
CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata
CVE-2026-3333 – Rebinding DNS pour voler les métadonnées cloud Code du programme serveur attaquant Python + application vulnérable root@kitploit: !/usr/bin/env python3 dnsrebindingserver.py - Malicious DNS server that alternates between attacker IP and 169.254.169.254 import socket, threading, ti...
CVE-2025-45955
CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Beschreibung Ein Angreifer kann diese Schwachstelle ausnutzen, indem er eine speziell präparierte PHP-Datei auf der Ferozo-Hosting-Plattform hochlädt und ausführt. Beim Zugriff startet die Datei eine Reihe von...
CVE-2026-63311 NLTK before 3.10.0 SSRF via DNS Resolution Failure
NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...
EUVD-2026-64334
NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...