Lucene search
+L

58014 matches found

EUVD
EUVD
added 2026/09/16 12:31 a.m.5 views

EUVD-2026-80070

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

6.5CVSS6.1AI score
SaveExploits0References9
EUVD
EUVD
added 2026/09/16 12:31 a.m.5 views

EUVD-2026-80059

Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wanconfigsetcgi, wannumsetcgi, and lanipchangecgi endpoints. Attackers can craft forged requests to trick authenticated administrators into modifying WAN or LAN network configuration...

8.1CVSS5.6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 9:08 p.m.5 views

CVE-2023-27163

PoC de SSRF en Request-Baskets CVE-2023-27163 Este repositorio contiene una Prueba de Concepto PoC para CVE-2023-27163, una vulnerabilidad de Server-Side Request Forgery SSRF descubierta en request-baskets hasta la versión 1.2.1. Esta vulnerabilidad permite a atacantes acceder a recursos de red e...

6.5CVSS7AI score0.06591EPSS
SaveExploits29References4
OSV
OSV
added 2026/09/15 8:57 p.m.4 views

GHSA-2H44-8472-FRJJ @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft Affected - Repository: zereight/gitlab-mcp - Affected versions: All versions through commit 74a8c83 - Patched versions: None at time of report Severity High. CVSS v3.1 8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Descripti...

9.6CVSS5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/15 8:35 p.m.7 views

ssrfnginx

ssrfnginx...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 7:59 p.m.8 views

CVE-2026-44578

CVE-2026-44578 — SSRF de Actualización WebSocket de Next.js Falsificación de Solicitud del Lado del Servidor sin autenticación en despliegues autoalojados de Next.js. Una única solicitud HTTP manipulada extrae credenciales de AWS, secretos y datos de servicios internos de localhost:80...

8.6CVSS7.9AI score0.38872EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/15 7:53 p.m.9 views

cve-2026-40072-ssrf-lab

Laboratorio SSRF CVE-2026-40072 Laboratorio local práctico para demostrar CVE-2026-40072 en web3.py, mostrar el impacto de SSRF en Burp Suite y verificar la corrección oficial. Resumen Este repositorio contiene una prueba de concepto segura y solo local para CVE-2026-40072, un problema de...

7.2CVSS5.9AI score0.00229EPSS
SaveExploits2
EUVD
EUVD
added 2026/09/15 7:49 p.m.3 views

EUVD-2026-79503

Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the same host, only the first ValidatedRemoteUrl is retained and reused for every later URL with that host. A...

2.1CVSS5.8AI score
SaveExploits0References1
CVE
CVE
added 2026/09/15 7:23 p.m.7 views

CVE-2026-76680

CVE-2026-76680 affects the API of EdgeConnect SD-WAN Orchestrator (HPE). The vulnerability is an authenticated Server-Side Request Forgery (SSRF) that allows a remote attacker with low privileges to forge requests to the internal structure of the Orchestrator host. A successful exploit enables en...

8.5CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2026/09/15 7:17 p.m.3 views

CVE-2026-19504

Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fabric.js. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on t...

4CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 7:13 p.m.10 views

security-research

Investigación de Seguridad Vulnerabilidades que he reportado a la Apache Software Foundation, divulgadas a través del proceso de seguridad de la ASF. 46 CVE en 15 proyectos , de 2023 a 2026. Cuando existe un reproductor público, se enlaza. Cada uno es un proyecto mínimo y autocontenido que...

5.8AI score
SaveExploits0
EUVD
EUVD
added 2026/09/15 7:07 p.m.3 views

EUVD-2026-79181

Server-Side Request Forgery SSRF in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other users' credentials and reach internal or cloud-metadata network endpoints via a crafted connection definition submitted for...

5.7AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/15 6:46 p.m.5 views

CVE-2026-81920 Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Dashboard SEO Excluded Words Reset Endpoint

Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery in the dashboard SEO Excluded Words page. The reset controller action cleared the administrator-configured reserved-word list concrete.seo.excludewords but did not validate the anti-CSRF token that the reset modal emitted, and ...

2.3CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 6:46 p.m.3 views

EUVD-2026-79285

Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery in the dashboard SEO Excluded Words page. The reset controller action cleared the administrator-configured reserved-word list concrete.seo.excludewords but did not validate the anti-CSRF token that the reset modal emitted, and ...

2.3CVSS5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 6:39 p.m.6 views

verify-ghsa-c4j6-fc7j-m34r

verify-ghsa-c4j6-fc7j-m34r In-band verifier for GHSA-c4j6-fc7j-m34r / CVE-2026-44578 — Server-Side Request Forgery in Next.js via WebSocket upgrade requests. ⚠️ For authorized security testing only. You are responsible for ensuring you have permission to test every target you pass to this script...

8.6CVSS7.9AI score0.38872EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/15 6:28 p.m.10 views

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364: Exploit de SSRF a LFI en Apache CXF MTOM XOP:Include ⚠️ DESCARGO DE RESPONSABILIDAD ESTA HERRAMIENTA ES SOLO PARA PRUEBAS DE SEGURIDAD EDUCATIVAS Y AUTORIZADAS Este exploit de prueba de concepto se proporciona con fines educativos para ayudar a los profesionales de seguridad a...

9.8CVSS6.7AI score0.02371EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/15 6:23 p.m.7 views

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Description CVE-2024-47066 : Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in src/app/api/proxy/route.ts does not consider redirect and could be...

9CVSS6AI score0.11765EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/09/15 4:41 p.m.7 views

CVE-2024-27954

⚠️ CVE-2024-27954 💀 Herramientas Automáticas de Explotación de Ejecución Remota de Código | Por GhostSec 💀 📝 Descripción Limitación incorrecta de una ruta de acceso a un directorio restringido vulnerabilidad de 'Path Traversal' en WP Automatic Automatic permite salto de ruta 'Path Traversal' y...

9.3CVSS8.5AI score0.72766EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 4:32 p.m.5 views

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" con "HARDWARE VERSION: V2.2"; y "FIRMWARE VERSION: OPV3.3.1-191028" vulnerabilidad encontrada en el "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" que permite a un atacante remoto no autenticado realizar un...

4.3CVSS5.6AI score0.00354EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 3:40 p.m.5 views

CVE-2024-57373

Vulnerabilidad CSRF en LifestyleStore v1.0 📌 Resumen Este repositorio documenta una vulnerabilidad de Cross-Site Request Forgery CSRF identificada en el proyecto LifestyleStore v1.0. La falla permite a los atacantes realizar acciones no autorizadas en nombre de los usuarios autenticados, lo que...

8.1CVSS6AI score0.00385EPSS
SaveExploits0
Rows per page
Query Builder