Lucene search
+L

10650 matches found

CVE
CVE
added 2026/09/13 7:15 p.m.6 views

CVE-2026-90580

FlowiseAI Flowise (up to version 3.0.2) contains a server-side request forgery (SSRF) vulnerability in the Evaluations Endpoint . The flaw resides in the axios.post function within packages/server/src/controllers/evaluations/index.ts, where manipulation of the Host or X-Forwarded-Proto header all...

6.5CVSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/13 5:51 p.m.4 views

CVE-2024-5736

CVE-2024-5736 AdmirorFrames Joomla! Extension 5.0 - Server-Side Request Forgery Timeline Vulnerability reported to vendor: 26.01.2024 New fixed 5.0 version released: 06.06.2024 Public disclosure: 28.06.2024 Description Server-Side Request Forgery in AdmirorFrames Joomla! Extension in afGdStream.p...

8.2CVSS5.9AI score0.01227EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 5:06 p.m.7 views

CVE-2024-27954

⚠️ CVE-2024-27954 💀 Automatic Remote code Execution Exploit Tools | By GhostSec 💀 📝 Description Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from...

9.3CVSS8.2AI score0.72766EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 12:54 p.m.10 views

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364: Apache CXF MTOM XOP:Include SSRF to LFI Exploit ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This proof-of-concept exploit is provided for educational purposes to help security professionals understand the vulnerability and protect their systems...

9.8CVSS6.7AI score0.02371EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 12:33 p.m.8 views

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 es una herramienta de descubrimiento de subdominios que encuentra y resuelve subdominios válidos y luego realiza fuzzing de SSRF/LFI/SQLi, fuerza bruta y escaneo de puertos. Tiene...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 12:13 p.m.6 views

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc This vulnerability is exploited by spoofing a demon agent registration and checkins to open a TCP socket on the teamserver and read/write data from it. This allows attackers to leak origin IPs of teamservers and much more. Full analysis:...

9.8CVSS6AI score0.02909EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/13 12:06 p.m.5 views

WebLogic-SSRF_CVE-2014-4210

WebLogic-SSRFCVE-2014-4210 Script de explotación de SSRF CVE-2014-4210 en Weblogic SearchPublicRegistries basado en Python3 Uso argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -u U URL objetivo única -uf UF Lee URLs desde un archivo -p P Escanea solo los puertos especificad...

5CVSS8.1AI score0.38152EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/13 11:57 a.m.8 views

CVE-2024-21893.py

CVE-2024-21893 is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication. run python CVE-2024-21893.py -u...

8.2CVSS8.2AI score0.99999EPSS
SaveExploits5
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.22 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

7.5CVSS5.5AI score
SaveExploits0References2Affected Software2
Kitploit
Kitploit
added 2026/09/13 11:31 a.m.6 views

CVE-2021-21349

CVE-2021-21349 XStream SSRF XStream Official Announcement CVE-2021-21349 Vulnerability CVE-2021-21349: A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host. Affected Versions...

8.6CVSS7AI score0.46826EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 11:06 a.m.5 views

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork:app:"Microsoft Exchange Server" Using the script MicrosoftExchangeServerSSRFCVE-2021-26855.py written with Seebug toolkit and pocsuite3, to probe data from the past year: 成功率约为:1500 / 5000 = 30%...

9.8CVSS8.2AI score0.99996EPSS
SaveExploits65References1
Kitploit
Kitploit
added 2026/09/13 9:26 a.m.5 views

CVE-2019-11581

CVE-2019–11581 PoC...

9.8CVSS9.1AI score0.84621EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 8:20 a.m.7 views

CVE-2021-27905

CVE-2021-27905 Apache Solr ReplicationHandler Server Side Request Forgery SSRF Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and clien...

9.8CVSS8.1AI score0.93053EPSS
SaveExploits5References3
Kitploit
Kitploit
added 2026/09/13 6:23 a.m.390 views

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 5:46 a.m.8 views

security-research

Security Research Vulnerabilities I have reported to the Apache Software Foundation, disclosed through the ASF security process. 46 CVEs across 15 projects , 2023 to 2026. Where a public reproducer exists it is linked. Each one is a minimal, self-contained project that demonstrates the issue and...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:41 a.m.4 views

CVE-2022-42889-Text4Shell-POC

CVE-2022-42889 Text4Shell Testing Script This repository contains a Python script to automate the process of testing for a vulnerability known as Text4Shell, referenced under the CVE id: CVE-2022-42889. About Text4Shell CVE-2022-42889 Text4Shell is a critical vulnerability that affects a wide ran...

9.8CVSS7.5AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/13 5:21 a.m.10 views

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

9.1CVSS7.4AI score0.98793EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 4:36 a.m.4 views

Xstream-1.4.17

Xstream-1.4.17 El entorno de demostración de Xstream anterior fue configurado por mí. El entorno de explotación de vulnerabilidades se basa en JDK1.8u131. Ahora admite pruebas locales y envío remoto de paquetes HTTP. Reproducción de vulnerabilidades de XSTREAM=1.4.17 CVE-2021-39141, CVE-2021-3914...

8.5CVSS7.5AI score0.98124EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/13 4:27 a.m.7 views

CVE-2026-44578

CVE-2026-44578 — Next.js WebSocket Upgrade SSRF Pre-authentication Server-Side Request Forgery in Next.js self-hosted deployments. A single crafted HTTP request extracts AWS credentials, secrets, and internal service data from localhost:80...

8.6CVSS7.7AI score0.38872EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 3:55 a.m.5 views

CVE-2021-26855_SSRF

CVE-2021-26855SSRF CVE-2021-26855 Exchange SSRF POC change the ceye.io tokne & Identifier : token = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' dnsurl = randomstr + '.XXXXXX.ceye.io' python CVE-2021-26855SSRF.py https://a.com...

9.8CVSS8.2AI score0.99996EPSS
SaveExploits65
Rows per page
Query Builder