CVE-2026-80464 API Tool Runner SSRF in HAVELSAN's Sef - AI Chatbot Platform

Server-Side request forgery SSRF vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-80464

A Server-Side request forgery (SSRF) vulnerability exists in the API Tool Runner of HAVELSAN Inc. Sef - AI Chatbot Platform . This issue allows an attacker to perform SSRF attacks. The vulnerability affects versions before 2.1 . Notably, the vendor has stated that this product is no longer suppor...

CVE-2024-54330

CVE-2024-54330 Hurrakify bfdibc85r04ky96cie05dfzjjgigz...

CVE-2026-104120

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetchurl of the file mcpserverfetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request...

CVE-2022-46364-htb-ctf

DevArea SOAP Exploitation Tool CVE-2022-46364 Description This specialized exploit targets the DevArea environment on Hack The Box. It leverages a critical vulnerability in Apache CXF 3.2.14 CVE-2022-46364 to perform Local File Inclusion LFI and Server-Side Request Forgery SSRF. The script abuses...

CVE-2026-104120

A server-side request forgery (SSRF) vulnerability exists in the modelcontextprotocol components mcp-server-fetch and mcp-server-everything up to version 2026.6.4 . The flaw is located in the fetch_url function within the file mcp_server_fetch/server.py of the Fetch Tool component. An attacker ca...

CVE-2026-104120 modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetchurl of the file mcpserverfetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request...

CVE-2026-104120 modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetchurl of the file mcpserverfetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request...

Apache OFBiz < 18.12.11 - Remote Code Execution

The vulnerability allows attackers to bypass authentication to achieve a simple Server-Side Request Forgery SSRF id: CVE-2023-51467 info: name: Apache OFBiz 18.12.11 - Remote Code Execution author: your3cho severity: critical description: | The vulnerability allows attackers to bypass...

Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery

Jenkins GitHub Plugin 1.29.1 and earlier is susceptible to server-side request forgery via GitHubTokenCredentialsCreator.java, which allows attackers to leverage attacker-specified credentials IDs obtained through another method and capture the credentials stored in Jenkins. id: CVE-2018-1000600...

VulnCheck KEV: CVE-2020-37278

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

PT-2026-104071

Name of the Vulnerable Software and Affected Versions mcp-server-fetch versions prior to 2026.6.4 mcp-server-everything versions prior to 2026.6.4 Description A server-side request forgery SSRF issue exists in the Fetch Tool component. The vulnerability occurs within the fetch url function locate...

PT-2026-104280

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.6.7 Description A server-side request forgery SSRF issue exists in the Bazar valeur action. Page editors can force the server to fetch arbitrary URLs by manipulating the url parameter. By embedding this action with ...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — Анализ уязвимости SonicWall SMA1000 Кибербезопасный проект, изучающий реальную уязвимость, её потенциальное влияние и то, как команды безопасности могут обнаруживать, устранять и проверять эту проблему. Обзор проекта Этот проект является частью моего пути в изучении...

CVE-2026-75898

CVE-2026-75898 — SSRF в компоненте Invoke RAGFlow Подделка серверных запросов Server-Side Request Forgery, CWE-918 в компоненте «Invoke» агентного рабочего процесса RAGFlow, до версии 0.26.3. | ---|--- CVE| CVE-2026-75898 CVSS| 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Исправлено в| v0.26....

halo-2.25.4-CVE-2026-67919

Аутентифицированное удалённое выполнение кода RCE через непроверенную установку плагина по URI в Halo 2.25.4 1. Сводка по уязвимости Критическая уязвимость безопасности обнаружена в версии Halo 2.25.4. Приложение предоставляет административную конечную точку для установки или обновления плагинов...

CVE-2026-26801-pdfmake-ssrf

PoC уязвимости SSRF в pdfmake Сводка по уязвимости Поле| Значение ---|--- Пакет| pdfmake Версия| = 0.3.0-beta.2, CREDENTIALS LEAKED! Это доказывает, что уязвимый сервер совершил и...

GitLab-SSRF-CVE-2021-22214

CVE-2021-22214 POC для CVE-2021-22214: Gitlab SSRF Описание Установленный GitLab содержит уязвимость Server-side request forgery SSRF в результате включения внутренней сети для вебхуков. Удалённый неаутентифицированный злоумышленник может использовать GitLab-инстанс с ограниченной регистрацией,...

OpenStack Swift vulnerable to authenticated server-side request forgery

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

CVE-2025-55853

CVE-2025-55853 - Local File Inclusion via Server Side Request Forgery SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery SSRF. About This PoC for CVE-2025-55853 demonstrates Server Side Request Forgery in the webPDF tool webPDF. used to convert files to PDF. The PDF...