PT-2025-24663 · Geoserver · Geoserver

Name of the Vulnerable Software and Affected Versions: GeoServer versions prior to 2.26.0 Description: The issue concerns the Coverage REST API, specifically the endpoint "/workspaces/workspaceName/coveragestores/storeName/method.format", which allows attackers to upload files with a specified UR...

CVE-2025-44043

Keyoti SearchUnit (prior to 9.0.0) is affected by two CVEs: CVE-2025-44043 (SSRF) in /SearchService.svc/GetResults and /GetLocationAndContentCategories, where an attacker can specify an SMB server as indexDirectory to cause the server to read/write configuration and log files on the attacker’s ho...

PT-2025-24706 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientEMS versions 7.4.0 through 7.4.2 Fortinet FortiClientEMS versions prior to 7.2.6 Description: A server-side request forgery issue may allow an authenticated attacker to perform internal requests via crafted HTTP or HTTPS...

PT-2025-24680 · Keyoti · Keyoti Searchunit

Name of the Vulnerable Software and Affected Versions: Keyoti SearchUnit versions prior to 9.0.0. Description: The issue is related to Server-Side Request Forgery SSRF in the /Keyoti SearchEngine Web Common/SearchService.svc/GetResults and /Keyoti SearchEngine Web...

PT-2025-24898 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to...

CVE-2025-30997

Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...

CVE-2025-30976

Server-Side Request Forgery SSRF vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request Forgery.This issue affects Nexa Blocks: from n/a through = 1.1.1...

CVE-2025-29008

Server-Side Request Forgery SSRF vulnerability in ShawonPro SocialMark socialmark allows Server Side Request Forgery.This issue affects SocialMark: from n/a through = 2.0.7...

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

CVE-2023-27163 - Request-Baskets SSRF Proof of Concept This i...

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

CVE-2023-27163 - Request-Baskets SSRF Proof of Concept This i...

Exploit for CVE-2025-22870

PoC – CVE-2025-22870 – HTTP Proxy Bypass via IPv6 Zone ID in G...

Exploit for Open Redirect in Grafana

Blackash-CVE-2025-4123 CVE-2025-4123 CVE ID: "CVE-2025-4123"...

CVE-2025-48962

Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 Windows, Linux before build 39938...

CVE-2025-30997

Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...

CVE-2025-30976

Server-Side Request Forgery SSRF vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request Forgery.This issue affects Nexa Blocks: from n/a through = 1.1.1...

CVE-2025-29008

Server-Side Request Forgery SSRF vulnerability in ShawonPro SocialMark socialmark allows Server Side Request Forgery.This issue affects SocialMark: from n/a through = 2.0.7...

CVE-2025-29008 WordPress SocialMark plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in ShawonPro SocialMark socialmark allows Server Side Request Forgery.This issue affects SocialMark: from n/a through = 2.0.7...

CVE-2025-29008 WordPress SocialMark <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in ShawonPro SocialMark allows Server Side Request Forgery. This issue affects SocialMark: from n/a through 2.0.7...

CVE-2025-29008

CVE-2025-29008 is a Server-Side Request Forgery (SSRF) vulnerability affecting the WordPress plugin SocialMark (ShawonPro). The vulnerability covers SocialMark versions up to 2.0.7 (no fixed version documented in provided sources). Public details cite an overall CVSS v3.1 base score of 4.9 (Mediu...

CVE-2025-30976 WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request Forgery.This issue affects Nexa Blocks: from n/a through = 1.1.1...