nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

Project-Deep-Focus

Deep Focus IP 범위에서 서비스를 발견하고 핑거프린팅하는 고성능 네트워크 정찰 도구입니다. 보안 연구원 및 네트워크 관리자를 위해 제작되었습니다. 목차 1. 개요 2. 기능 3. 요구 사항 4. 설치 5. 사용법 6. 설정 7. 내보내기 로그 이해 8. 대상 선택 가이드 9. 문제 해결 10. 라이선스 개요 Deep Focus는 대규모 서비스 검색을 위해 설계된 비동기 네트워크 스캐너입니다. 일반적인 네트워크 서비스를 지능적으로 프로빙하고 발견된 각 서비스에 대한 상세한 인증 상태 정보를 제공합니다. 개인용 미니...

CVE-2019-19781

CVE-2019-19781 대량 개념 검증용 사용 제한 1. 사용 전 폴더 내에 "data.txt" 파일이 있어야 하며, 내용은 192.168.1.0/24\n 192.168.2.0/24\n 입니다. 2. Linux에서만 실행하며, python3 CVE-2019-19781-testbata.py 3. 성공적으로 실행되어 취약점이 발견되면 "CVE-2019-19781.txt"로 내보냅니다...

awsScrape

AWSScrape AWSScrapeは、すべてのAWS IPレンジからSSL証明書をスクレイピングし、証明書のCommon Name（CN）、Organization（O）、Organizational Unit（OU）フィールド内で特定のキーワードを検索するように設計されたツールです。 インストール 1. このリポジトリをクローンします: root@kitploit: git clone https://github.com/jhaddix/awsscrape.git cd awsscrape 使用方法 スクリプトを次のように実行します: root@kitploit: go run...

EUVD-2026-75184

Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch...

ai-bot-ip-ranges

AIボットIPレンジ 主要プロバイダーが公開するAIボットクローラーの公式IPレンジを集めたコレクションです。 概要 このリポジトリは、AIプロバイダーが公開するウェブクローラー用のIPアドレスレンジを追跡・集約します。これらのレンジは以下の用途に役立ちます： 正規ボットトラフィックの検証 ファイアウォールルールの設定 アナリティクスのフィルタリング ボットの選択的ブロック セキュリティ監視 最終更新: 2026-05-23T09:16:13.774655Z 統計 指標| 件数 ---|--- プロバイダー総数| 9 IPレンジ総数| 2297 更新頻度| 毎週月曜日 00:00 UTC...

CVE-2026-87999

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/openwebui/retrieval/web/utils.py treated Python's globally routable address classification as proof th...

CVE-2026-87999 Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/openwebui/retrieval/web/utils.py treated Python's globally routable address classification as proof th...

PT-2026-89176

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/open webui/retrieval/web/utils.py treated Python's globally routable address classification as proof...

CVE-2026-9081

IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery SSRF vulnerability in the validatemodelproviderkey function for the Ollama provider. The function accepts a user-supplied OLLAMABASEURL parameter and passes it directly to requests.get without...

@novu/application-generic: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition

Hi Novu team, Reporting an SSRF blocklist gap in the shared validateUrlSsrf guard. A complete self-contained reproduction is inlined below — copy the four files into a directory and run docker compose up, plus a single-file probe that runs against Node directly. Locally validated against HEAD...

CVE-2026-65056

CVE-2026-65056 describes a server-side request forgery in mcp-webresearch 0.1.7. The vulnerability arises because visit_page validates only URL protocol and does not filter private or reserved IP ranges, enabling an attacker to access internal network services by supplying loopback, link-local, o...

CVE-2026-46415

The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's IP address. Prior to version 0.10.1, Caddy Defender used r.RemoteAddr when evaluating whether a request should be blocked. RemoteAddr is the address of the immediate peer...

CVE-2026-62242 Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration

Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled healthUrl and managementUrl parameters without validation against private IP ranges or metadata endpoints. Attackers can...

PT-2026-56088

Name of the Vulnerable Software and Affected Versions flyto-core affected versions not specified Description An issue exists in the Server-Side Request Forgery SSRF protection mechanism within src/core/utils.py. The is private ip function and validate url ssrf guard only check for native RFC 1918...

foreman: Foreman: Information disclosure via improper validation of nested request parameters

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...

CVE-2026-5138 Foreman: foreman: information disclosure via improper validation of nested request parameters

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...

CVE-2026-54353

Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. The outbound fetch flow validates a hostname against the blacklist before the request is sent, but the actual socket connectio...

CVE-2026-28385 SSRF via image import from URL allows internal network probing by authenticated users

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

CVE-2026-46348

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, the list of disallowed IP address ranges was lacking an IP address range that can be used to reach local IP addresses. An attacker can use an IP address in the affected range to make...