EUVD-2026-92107

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

ProxyLogon-CVE-2021-26855-metasploit

ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon Exchange SSRF から任意のファイル書き込みまでの metasploit エクスプロイトスクリプト 準備 git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p /.msf4/modules/exploits/windows/ cp...

CVE-2024-21893.py

CVE-2024-21893 は、Ivanti Connect Secure 9.x, 22.x および Ivanti Policy Secure 9.x, 22.x および Ivanti Neurons for ZTA の SAML コンポーネントにおけるサーバーサイドリクエストフォージェリの脆弱性であり、攻撃者が認証なしで特定の制限されたリソースにアクセスできるようになります。 python CVE-2024-21893.py -u target.com -a http://xxxxxxxxx.oastify.com を実行します。 RCE POST /dana-ws/saml20....

CVE-2022-42889-Text4Shell-POC

CVE-2022-42889 Text4Shell テストスクリプト このリポジトリには、CVE ID: CVE-2022-42889 で参照される Text4Shell として知られる脆弱性のテストを自動化する Python スクリプトが含まれています。 Text4Shell CVE-2022-42889 について Text4Shell は、幅広いシステムに影響を与える深刻な脆弱性です。この脆弱性は、システムがテキスト文字列を解析する方法に存在し、任意のコードの実行や SSRF 攻撃を可能にします。この脆弱性は、細工された文字列によって悪用され、JavaScript...

gitlab-cve-2021-22214

gitlab-cve-2021-22214 Gitlab SSRF 私たちをフォロー Vulnmachines YouTube Twitter Facebook LinkedIn...

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork: app:"Microsoft Exchange Server" Seebugツールボックスとpocsuite3を使用して作成されたスクリプトMicrosoftExchangeServerSSRFCVE-2021-26855.pyを使用し、過去約1年間のデータをスキャンしました： 成功率は約：1500 / 5000 = 30%...

CVE-2021-27905

CVE-2021-27905 Apache Solr ReplicationHandler サーバーサイドリクエストフォージェリ SSRF Hit Counter Apache Solr（Searching On Lucene with Replicationの略）は、Apache Luceneライブラリをベースにしたフリーのオープンソース検索エンジンです。Javaで記述されています。Apache Solrは、RESTful XML/HTTPおよびJSON...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

Web-Security-Learning

Web-Security-Learning プロジェクトURL： https://github.com/CHYbeta/Web-Security-Learning ナレッジプラネット【脆弱性攻防】：https://t.zsxq.com/mm2zBeq 目次： Web-Security-Learning Web Security SQLインジェクション MySql MSSQL PostgreSQL MongoDB テクニック ツール XSS CSRF その他のフロントエンドセキュリティ SSRF XXE JSONPインジェクション SSTI コード実行 / コマンド実行 ファイルインクルー...

Lightdash v0.1024.6 - Server-Side Request Forgery

Server-Side Request Forgery “SSRF” in the export dashboard functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to obtain the session cookie of any user who exports a crafted dashboard. When they are exported, dashboards containing HTML elements can trigger HTTP...

WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery

WordPress Paytm Payment Gateway plugin through 2.7.0 contains a server-side request forgery vulnerability. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized...

Apache OFBiz < 18.12.11 - Server Side Request Forgery

Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations. The same uri can be operated to realize a SSRF attack also without authorizations. Users are recommended to upgrade to version 18.12.11, which fixes th...

Journyx - XML External Entities Injection (XXE)

The "soapcgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources. id: CVE-2024-6893 info: name: Journyx - XML...

FormCraft3 <= 3.9.15 - Server-Side Request Forgery

Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions. id: CVE-2026-65442 info: name: FormCraft3 = 3.9.15 - Server-Side Request Forgery author: DhiyaneshDk severity: high description: | Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...

Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter. id: CVE-2023-30019 info: name: Imgproxy = 3.14.0 - Server-side request forgery SSRF author: DhiyaneshDK severity: medium description: | imgproxy =3.14.0 is vulnerable to...

Radio Player <= 2.0.82 - Server-Side Request Forgery

The Radio Player Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

Umbraco <7.4.0- Server-Side Request Forgery

Umbraco before version 7.4.0 contains a server-side request forgery vulnerability in feedproxy.aspx that allows attackers to send arbitrary HTTP GET requests via http://local/Umbraco/feedproxy.aspx?url=http://127.0.0.1:80/index. id: CVE-2015-8813 info: name: Umbraco 7.4.0- Server-Side Request...

Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)

imgproxy contains an issue caused by not blocking the 0.0.0.0 address even when IMGPROXYALLOWLOOPBACKSOURCEADDRESSES is set to false, letting local services be exposed, exploit requires network access. id: CVE-2025-24354 info: name: Imgproxy 3.27.2 - Server-Side Request Forgery SSRF author:...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...