CVE-2024-57373

CSRF Vulnerability in LifestyleStore v1.0 📌 Overview This repository documents a Cross-Site Request Forgery CSRF vulnerability identified in the LifestyleStore v1.0 project. The flaw allows attackers to perform unauthorized actions on behalf of authenticated users, posing risks to data integrity...

gitlab-cve-2021-22214

gitlab-cve-2021-22214 Gitlab SSRF Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2023-27163---SSRF-Baskets-Requests

CVE-2023-27163---SSRF-Baskets-Requests Create by TheAlchimist root@kitploit: cve-2023-27163-ssrfbaskets.py example : cve-2023-27163-ssrfbaskets.py http://mysite.com http://localhost...

CVE-2026-13156

CVE-2026-13156 — تكامل MailerSend الرسمي لـ SMTP !IMPORTANT الملخص: تم اكتشاف ثغرة تزوير طلبات عبر المواقع CSRF عالية الخطورة CVE-2026-13156 في إضافة MailerSend SMTP Integration الرسمية لـ WordPress 1.0.8. يتحقق معالج حذف الإعدادات mailersendhandleconfigurationdelete من صلاحيات الإدارة...

Deep-Reaver

Deep Reaver Deep Reaver एक शक्तिशाली, AI-संवर्धित भेद्यता आकलन और शोषण टूलकिट है जो Python में बनाया गया है। Nmap और Nessus जैसे उपकरणों से प्रेरित, Deep Reaver को वेब अनुप्रयोगों और सेवाओं की गहन, मॉड्यूलर स्कैनिंग के लिए डिज़ाइन किया गया है। विशेषताएं aiassistant.py के माध्यम से AI-सहायित...

CVE-2025-39601

🚨 CVE-2025-39601 - CSRF to RCE in WordPress Custom CSS, JS & PHP plugin = 2.4.1 🧠 Description A Cross-Site Request Forgery CSRF vulnerability in the WPFactory Custom CSS, JS & PHP plugin allows for Remote Code Execution RCE by injecting malicious PHP code via unauthorized POST requests. This...

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364: Apache CXF MTOM XOP:Include SSRF to LFI Exploit ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This proof-of-concept exploit is provided for educational purposes to help security professionals understand the vulnerability and protect their systems...

ConceptronicIPCam_MultipleVulnerabilities

Multiple vulnerabilities at Conceptronic IP Cameras with 0.61.X. web firmware. A CSRF and Denial of Service vulnerabilities have been found at Conceptronic IP Cameras. CVE| Description ---|--- CVE-2018-6407| Unauthenticated remote Denial of Service vulnerability CVE-2018-6408| CSRF allows to chan...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Description CVE-2024-47066 : Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in src/app/api/proxy/route.ts does not consider redirect and could be...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - Unauthenticated Server-Side Request Forgery Description The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This...

CVE-2024-5736

CVE-2024-5736 AdmirorFrames Joomla! Extension 5.0 - Server-Side Request Forgery Timeline Vulnerability reported to vendor: 26.01.2024 New fixed 5.0 version released: 06.06.2024 Public disclosure: 28.06.2024 Description Server-Side Request Forgery in AdmirorFrames Joomla! Extension in afGdStream.p...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Remote Code Execution via Log File System Setting and Log File Poisioning Overview I recently discovered two vulnerabilities in SuiteCRM that provides an attack chain for a low privileged user to achieve code execution on the underlying operating system. The attack chain i...

basketcraft

basketcraft this is a script that exploits the CVE-2023-27163 vulnerability which is an SSRF in the request-baskets version 1.2.1 SSRF on Request-Baskets CVE-2023–27163 CVE-2023–27163 represents a critical Server-Side Request Forgery SSRF vulnerability that was identified in Request-Baskets,...

CVE-2023-43147

CVE-2023-43147 विक्रेता: PHPJabbers विक्रेता होमपेज: https://www.phpjabbers.com/ सॉफ़्टवेयर लिंक: https://www.phpjabbers.com/limo-booking-software संस्करण: 1.0 परीक्षण किया गया: Windows 10 Pro प्रभाव: एडमिन विशेषाधिकारों के साथ एक हमलावर उपयोगकर्ता जोड़ना CVE: limo-booking-software में क्रॉस-साइट...

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028"which allows an unauthenticated, remote attacker to conduct a...

CVE-2023-40868

CVE-2023-40868 Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions. The vulnerability is a Cross-Site Request Forgery CSRF vulnerability in the mooSocial MooSocial Softwa...

CVE-2024-52402

🚀 استغلال ثغرة CVE-2024-52402: إضافة Exclusive Content Password Protect في WordPress -un -p 🛠️ الخيارات...

wargame_Re-LS

CVE-2025-0184 DOCX SSRF CTF Challenge Quick Start root@kitploit: 1. Setup and Build make setup make build 2. Start Services make up 3. Web Access open http://localhost:8080 Goal Access the internal Admin service port 3003 and obtain the flag! Expected Flag : CTFflagreadme Exploit root@kitploit: c...

ProxyLogon-CVE-2021-26855-metasploit

ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon exchange ssrf to arbitrary file write metasploit exploit script preparation root@kitploit: git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p...

CVE-2025-26206

🚨 CVE-2025-26206: Sell Done Storefront v.1.0 में क्रॉस-साइट अनुरोध जालसाजी CSRF CVE-2025-26206 के खोज और विवरणों का दस्तावेजीकरण करने वाले आधिकारिक भंडार में आपका स्वागत है, जो Sell Done Storefront v.1.0 में एक गंभीर क्रॉस-साइट अनुरोध जालसाजी CSRF भेद्यता है। B. Sibhi द्वारा खोजी गई, यह भेद्यता...