CVE-2024-25864

Server Side Request Forgery SSRF vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the fpostit.php component...

CVE-2024-25864

Friendica (post-2023.12 versions) is affected by a Server-Side Request Forgery (SSRF) in the fpostit.php component. The underlying issue enables a remote attacker to cause arbitrary code execution and obtain sensitive information. The vulnerability is documented across multiple feeds, with remedi...

CVE-2021-27312

Server Side Request Forgery SSRF vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php...

CVE-2024-25864

Server Side Request Forgery SSRF vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the fpostit.php component...

CVE-2024-25864

Server Side Request Forgery SSRF vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the fpostit.php component...

CVE-2024-30532

Server-Side Request Forgery SSRF vulnerability in Builderall Team Builderall Builder for WordPress.This issue affects Builderall Builder for WordPress: from n/a through 2.0.1...

CVE-2024-30531 WordPress Nelio Content plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Nelio Software Nelio Content.This issue affects Nelio Content: from n/a through 3.2.0...

CVE-2024-30531

CVE-2024-30531 is an SSRF issue in Nelio Content for WordPress. Affected: Nelio Content up to version 3.2.0. Descriptions in connected docs reference SSRF but do not provide concrete exploit details, root-cause analysis, or patch/version remediation beyond the affected range. No explicit exploit ...

CVE-2024-30531 WordPress Nelio Content plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Nelio Software Nelio Content.This issue affects Nelio Content: from n/a through 3.2.0...

CVE-2024-30532 WordPress Builderall Builder for WordPress plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Builderall Team Builderall Builder for WordPress.This issue affects Builderall Builder for WordPress: from n/a through 2.0.1...

CVE-2024-30532 WordPress Builderall Builder for WordPress plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Builderall Team Builderall Builder for WordPress.This issue affects Builderall Builder for WordPress: from n/a through 2.0.1...

CVE-2024-30532

CVE-2024-30532 is an unauthenticated SSRF in Builderall Builder for WordPress (WordPress plugin) affecting versions up to 2.0.1. It is addressed in later builds (e.g., 2.0.3 per associated advisories). CVSS 3.1 base score 4.9 (Medium). Remediation: upgrade to 2.0.3 or newer and re-test. Details f...

CVE-2024-24888

CVE-2024-24888 is a Server-Side Request Forgery (SSRF) in Gutenberg Blocks powered by Kadence Blocks. The vulnerability affects the Kadence Blocks Gutenberg Blocks plugin for WordPress, specifically versions up to 3.2.25. According to the connected Red Hat advisory, the flaw enables a server-side...

Exploit for Server-Side Request Forgery in Kubernetes Apiserver

CVE-2022-3172 demo Run poc.sh create...

PT-2024-2891

Name of the Vulnerable Software and Affected Versions Mobile Security Framework MobSF versions prior to 3.9.8 Description A Server-Side Request Forgery SSRF vulnerability exists in the firebase database check logic of the Mobile Security Framework MobSF. This allows an attacker to cause the serve...

PT-2024-23: Server-Side Request Forgery (SSRF) in Mobile Security Framework (MobSF)

The vulnerability was identified in Mobile Security Framework MobSF, versions =3.9.7. The discovered SSRF vulnerability in Firebase Database Check can be exploited by an attacker to make server connect to internal-only services. It is possible to make internal requests in case a malicious app is...

CVE-2024-25187

CVE-2024-25187 : A Server Side Request Forgery (SSRF) in 71cms v1.0.0 allows remote, unauthenticated attackers to disclose sensitive information via the getweather.html endpoint. Affected component is the getweather.html handling in 71cms v1.0.0; root cause details are not provided beyond the SSR...

PT-2024-5104

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.59 and earlier Description: The issue is related to a potential Server-Side Request Forgery SSRF in the mod rewrite module of the Apache HTTP Server. This allows an attacker to cause unsafe RewriteRules to...

Exploit for Server-Side Request Forgery in Anyscale Ray

PoC for a remote command execution vulnerability in Ray framew...

Server Side Request Forgery (SSRF)

gradio is vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to the /proxy route allowing users to proxy arbitrary URLs include potentially internal endpoints. Attackers can proxy arbitrary URLs by exploiting this vulnerability...