CVE-2024-39205-Pyload-RCE

CVE-2024-39205-Pyload-RCE js2py サンドボックスエスケープを利用した Pyload RCE 概要 python3.11 以下で実行されている pyload-ng は、RCE に対して脆弱です。攻撃者は任意のシェルコマンドを含むリクエストを送信するだけで、被害サーバー上で即座にそのコマンドが実行されます。 修正 pyload-ng の最新版にアップグレードするか、単に pyload を python3.12 以上で実行してください。 詳細 js2py には、CVE-2024-28397 として割り当てられたサンドボックスエスケープの脆弱性があり、これは...

CVE-2023-27163

CVE-2023-27163 の Request-Baskets における SSRF の概念実証 Proof of Concept このリポジトリには、request-baskets の バージョン 1.2.1 までで発見された Server-Side Request Forgery SSRF 脆弱性である CVE-2023-27163 の概念実証 PoC が含まれています。この脆弱性により、攻撃者は巧妙に細工された API リクエストを通じて /api/baskets/name コンポーネントを悪用し、ネットワークリソースや機密情報にアクセスできるようになります。 使用方法...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – URLパーサー差分によるSSRF プログラムコード（Python） root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed = urllib.parse.urlparseurl Only allow...

martian-packets

Martian Packets 生のTCP/IPパケットを生成するために使えるPythonスクリプトを含むリポジトリです。 kubernetesで発表された脆弱性（kube-proxy: CVE-2020-8558）に続くmartianパケットのテストに使用されます。このPoCは、pod - node（ホスト）のlocalhost境界バイパスを対象としています。 この脆弱性のnode - node部分に対するシンプルで堅牢なPoCについては、こちらを参照してください。 パケット生成のクレジット:...

CVE-2026-9186

IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoofing X-Forwarded-For: 127.0.0.1 header, enabling arbitrary writes to IDE config files /.cursor/mcp.json, etc...

EUVD-2026-71215

IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoofing X-Forwarded-For: 127.0.0.1 header, enabling arbitrary writes to IDE config files /.cursor/mcp.json, etc...

PT-2026-85588

IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoofing X-Forwarded-For: 127.0.0.1 header, enabling arbitrary writes to IDE config files /.cursor/mcp.json, etc...

CVE-2026-9077

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system...

CVE-2026-9077

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system...

CVE-2026-9077

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system...

CVE-2026-9077

Summary of CVE-2026-9077 (IBM Langflow OSS) : Langflow OSS versions 1.0.0–1.10.3 allow remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host. The vulnerability stems from weaknesses in MCP command/...

CVE-2026-9077 Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system...

EUVD-2026-53463

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system...

Server-Side Request Forgery (SSRF)

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Server-Side Request Forgery SSRF in the isDeniedIP function, which fails to properly normalize IPv4-mapped IPv6 addresses before checking them against the deny list. An attacker can access internal services...

CVE-2026-70367

A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...

PT-2026-67712

Name of the Vulnerable Software and Affected Versions stunnel versions prior to 5.80 Description A Server-Side Request Forgery SSRF bypass occurs when the software is configured in SOCKS proxy mode. This issue allows a client to circumvent localhost restrictions by utilizing unspecified addresses...

CVE-2026-63313

9Router before 0.4.72 contains a server-side request forgery SSRF vulnerability in the /v1/web/fetch endpoint. The endpoint accepts a user-controlled url parameter and passes it to a configured external scraping provider Firecrawl, Jina Reader, Tavily, or Exa to fetch content. The URL is only...

PT-2026-64185

Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.4.72 Description A server-side request forgery SSRF issue exists in the '/v1/web/fetch' endpoint. The endpoint accepts a user-controlled url parameter and passes it to an external scraping provider to fetch content...

CVE-2026-62312

9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to childprocess.spawn, allowing...

CVE-2026-62312

CVE-2026-62312 affects 9Router, an AI router & token saver. Before v0.5.2, an authenticated remote attacker can achieve arbitrary code execution on the host by abusing a Host header bypass of localhost-only routes in combination with unvalidated MCP plugin arguments passed to child_process.spawn(...