11 matches found
cdn-ip-scanner
CDN IP Scanner V3.0 High Accuracy ā¢ Ultra Fast ā¢ Real-Time š Language: English | ŁŲ§Ų±Ų³Ū Install ā¢ Features ā¢ Usage ā¢ What's new ā¢ Developers ā¢ Donate š Table of Contents 1. Overview 2. Features 3. Installation npm app Windows / macOS / Linux ā step by step Android app Linux server Release files &...
saas_enum
SaaS Enum SaaS Enum is a command line tool for discovering the SaaS platforms a company may be using. The tool looks for DNS entries that match known provider patterns and optionally performs lightweight web checks for confirmation. Installation pip install -r requirements.txt Usage Basic check...
CVE-2026-105214
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...
CVE-2026-105214 Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...
CVE-2026-105214 Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...
CVE-2026-105214
Zitadel versions prior to 4.16.2 are vulnerable to a Server-Side Request Forgery (SSRF) flaw during organization domain HTTP verification. The root cause is the use of Go's default http.Get instead of a protected client for challenge fetches. Attackers can register domains that redirect to loopba...
CVE-2026-105214 Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...
EUVD-2026-92107
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...
CVE-2026-105214: Server-Side Request Forgery (SSRF)
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...
PT-2026-104638
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...
CVE-2026-44430 MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist
The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the Registry's HTTP-based namespace verification POST /v0/auth/http, POST /v0.1/auth/http uses safeDialContext internal/api/handlers/v0/auth/http.go:67-110 to refuse dialling...