CVE-2021-26855

CVE-2021-26855 CVE-2021-26855 SSRF Einfache Ausnutzung Golang-Übung Betroffene Versionen Exchange Server 2013 vor CU23 Exchange Server 2016 vor CU18 Exchange Server 2019 vor CU7 Nutzungsbedingungen Diese Schwachstelle unterscheidet sich von früheren Exchange-Schwachstellen. Sie erfordert keine...

EspoCRM <= 9.3.3 - Server-Side Request Forgery

EspoCRM = 9.3.3 contains an authenticated server-side request forgery caused by improper internal-host validation using alternative IPv4 formats in HostCheck::isNotInternalHost, letting authenticated users access internal resources via /api/v1/Attachment/fromImageUrl endpoint. id: CVE-2026-33534...

LyLme spage v1.9.5 - Server-Side Request Forgery

LyLme spage v1.9.5 is vulnerable to server-side request forgery SSRF via the url parameter in apply/index.php. An attacker can force the server to make arbitrary requests, potentially accessing internal resources. id: CVE-2024-36675 info: name: LyLme spage v1.9.5 - Server-Side Request Forgery...

Astro SSR - Server-Side Request Forgery

Astro before 5.17.3 and @astrojs/node before 9.5.4 are vulnerable to full-read SSRF due to improper Host header validation in error page rendering, allowing attackers to redirect requests and access internal resources. id: CVE-2026-25545 info: name: Astro SSR - Server-Side Request Forgery author:...

MagicMirror <= 2.35.0 - Server-Side Request Forgery

An unauthenticated Server-Side Request Forgery SSRF vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP requests to internal networks, cloud metadata services, and localhost services. The endpoint also expands environment...

MeterSphere < 2.5.0 SSRF

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Site Scripting. A Server-Side request forgery in...

CVE-2026-44578-PoC

CVE-2026-44578 - Next.js WebSocket SSRF PoC Schwachstelle: Server-Side Request Forgery im Next.js WebSocket-Upgrade-Handler 13.4.13 → 15.5.15, 16.0.0 → 16.1.6 Verwendung root@kitploit: Detect vulnerability python3 poc.py target.com:3000 --detect Tunnel to internal Redis python3 poc.py...

CVE-2021-21975

CVE-2021-21975 VMware vRealize Operations Manager API Server Side Request Forgery SSRF vRealize Operations vROps è uno strumento che offre una gestione autonoma delle operazioni IT basata sull'intelligenza artificiale, dalle applicazioni all'infrastruttura, per ottimizzare, pianificare e scalare ...

CVE-2026-63311

A flaw was found in NLTK. This server-side request forgery SSRF vulnerability allows an attacker to bypass network access restrictions. By triggering DNS resolution failures or using DNS rebinding, an attacker can cause the validatenetworkurl function to incorrectly validate URLs. This enables...

XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

CVE-2021-26855-PoC

CVE-2021-26855-PoC CVE-2021-26855 के लिए PoC शोषण कोड। मूल कोड https://github.com/GreyOrder द्वारा विकसित किया गया था। CVE-2021-26855 ssrf golang अभ्यास का सरल उपयोग प्रभावित संस्करण root@kitploit: Exchange Server 2013 CU23 से कम है Exchange Server 2016 CU18 से कम है Exchange Server 2019 CU7 से क...

CVE-2025-68645

🛡️ CVE-2025-68645 - Zimbra 로컬 파일 포함 LFI 분석 📌 개요 이 문서는 Zimbra Collaboration Suite 에 영향을 미치는 로컬 파일 포함 LFI 취약점에 대해 설명합니다. 이 문제는 다음 매개변수의 부적절한 처리에서 발생합니다. root@kitploit: /h/?javax.servlet.include.servletpath= 이로 인해 인증되지 않은 사용자가 내부 애플리케이션 리소스에 접근할 수 있습니다. 🔍 취약점 세부 정보 유형: 로컬 파일 포함 LFI 접근: 인증되지 않음 영향을 받는...

CVE-2022-41401

OpenRefine = v3.5.2 SSRF OpenRefine v=3.5.2 contiene una vulnerabilità di Server-Side Request Forgery SSRF, che consente a utenti non autorizzati di sfruttare il sistema, portando potenzialmente a un accesso non autorizzato a risorse interne e alla divulgazione di file sensibili. La causa...

EUVD-2026-63439

Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public address during validation and a loopback or internal address...

CVE-2026-62857

Fedify: Server-Side Request Forgery via getNodeInfo() is caused by following attacker-controlled links[].href from /.well-known/nodeinfo without scheme/redirect/private-address validation. Affected: Fedify versions 1.2.0 through 1.9, 1.10, 2.0, 2.1, 2.2, 2.3 maintenance lines. Impact: may access ...

CVE-2026-62857 Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resources

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. From version 1.2.0 through the affected 1.9, 1.10, 2.0, 2.1, 2.2, and 2.3 maintenance lines, getNodeInfo follows an attacker-controlled links.href value from /.well-known/nodeinfo without scheme, redirect, o...

SSRF (Server-Side Request Forgery) ip-address Dependency in Jira Service Management Data Center

This High severity SSRF Server-Side Request Forgery vulnerability was introduced in versions 11.2.0 and 11.3.0 of Jira Service Management Data Center. This SSRF Server-Side Request Forgery vulnerability, with a CVSS Score of 7.7 and a CVSS Vector of...

SSRF (Server-Side Request Forgery) ip-address Dependency in Jira Software Data Center

This High severity SSRF Server-Side Request Forgery vulnerability was introduced in versions 11.2.0 and 11.3.0 of Jira Software Data Center. This SSRF Server-Side Request Forgery vulnerability, with a CVSS Score of 7.7 and a CVSS Vector of...

ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IP addresses. By appending a Classless Inter-Domain Routing CIDR suffix to an IP address, an attacker can bypass the library's special-use classification methods. This misclassification can lead applications, such a...

CVE-2026-71270 Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint Subprocess

Stirling-PDF's POST /api/v1/convert/url/pdf endpoint ConvertWebsiteToPDF.java was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints html/pdf, file/pdf, markdown/pdf...