Stirling-PDF < 1.1.0 - Server-Side Request Forgery

Stirling-PDF 1.1.0 contains a server side request forgery caused by bypassing the sanitizer in the /api/v1/convert/html/pdf endpoint when processing HTML to PDF conversion, letting attackers perform SSRF, exploit requires local access. id: CVE-2025-55150 info: name: Stirling-PDF 1.1.0 - Server-Si...

D-Link Central WifiManager - Server-Side Request Forgery

D-Link Central WifiManager is susceptible to server-side request forgery. The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, as demonstrated by an...

NextChat - Server-Side Request Forgery

NextChat v2.12.3 suffers from a Server-Side Request Forgery SSRF and Cross-Site Scripting vulnerability due to a lack of validation of the GET parameter on the WebDav API endpoint. id: CVE-2024-38514 info: name: NextChat - Server-Side Request Forgery author: DhiyaneshDk severity: high description...

Gradio - Server Side Request Forgery

An SSRF Server-Side Request Forgery vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter in a GET request, an attacker can discern the status of internal ports based on the...

Elestio Memos <= v0.24.0 - Server-Side Request Forgery

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks. id: CVE-2025-22952 info: name: Elestio Memos = v0.24.0 - Server-Side Request Forgery author: iamnoooob,rootxharsh,pdresearc...

Qualitor <= v8.24 - Server-Side Request Forgery

Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php. id: CVE-2024-48360 info: name: Qualitor = v8.24 - Server-Side Request Forgery author: s4e-io severity: high description: | Qualitor v8.24 was discovered to contain a Server-Si...

Ligeo Archives Ligeo Basics - Server Side Request Forgery

Ligeo Archives Ligeo Basics as of 0201-2022 is vulnerable to Server Side Request Forgery SSRF which allows an attacker to read any documents via the download features. id: CVE-2021-46107 info: name: Ligeo Archives Ligeo Basics - Server Side Request Forgery author: ritikchaddha severity: high...

WordPress JSmol2WP <=1.07 - Local File Inclusion

WordPress JSmol2WP plugin 1.07 is susceptible to local file inclusion via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context...

GeoServer WFS - XXE Processing Vulnerability

GeoServer Web Feature Service WFS is vulnerable to an XML External Entity XXE processing attack due to improper handling of XML input. This vulnerability allows attackers to perform Out-of-Band OOB data exfiltration and Server-Side Request Forgery SSRF by exploiting the GeoTools library. id:...

CVE-2019-12384

CVE-2019-12384 RCE et SSRF Jackson 0x01 python -m SimpleHTTPServer python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ... 127.0.0.1 - - 24/Jul/2019 03:06:32 "GET /inject.sql HTTP/1.1" 200 - inject.sql CREATE ALIAS SHELLEXEC AS $$ String shellexecString cmd throws java.io.IOException...

CVE-2024-27954

⚠️ CVE-2024-27954 💀 Automatic - Outils d'exploitation d'exécution de code à distance | Par GhostSec 💀 📝 Description Vulnérabilité de limitation incorrecte d'un nom de chemin vers un répertoire restreint 'Path Traversal' dans WP Automatic Automatic permet le Path Traversal, la Server Side Request...

lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 est un outil de découverte de sous-domaines qui trouve et résout les sous-domaines valides, puis effectue du fuzzing SSRF/LFI/SQLi, du brute-force et du scan de ports. Il possède une architecture...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Description CVE-2024-47066 : Lobe Chat est un framework de chat open-source d'intelligence artificielle. Avant la version 1.19.13, la protection contre la falsification de requêtes côté serveur implémentée dans src/app/api/proxy/route.ts ne pren...

CVE-2024-48360

CVE-2024-48360 | Qualitor = v8.24 SSRF non authentifié CVE-2024-48360 | Qualitor = v8.24 SSRF non authentifié Description Qualitor est une plateforme de gestion des processus métiers, et ce système est présent dans diverses entreprises au Brésil qui peuvent être identifiées simplement en utilisan...

CVE-2019-11581

CVE-2019–11581 PoC...

CVE-2022-41040

CVE-2022-41040 Microsoft Exchange vulnérable à la falsification de requête côté serveur Payload : /autodiscover/autodiscover.json?@URL/&Email=autodiscover/autodiscover.json%3f@URL /autodiscover/autodiscover.json?@%d.v1.COLLABHERE/&Email=autodiscover/autodiscover.json%3f@%d.v1.COLLABHERE...

CVE-2021-21349

CVE-2021-21349 XStream SSRF Annonce officielle de XStream CVE-2021-21349 Vulnérabilité CVE-2021-21349 : une requête de falsification côté serveur peut être activée lors de la désérialisation avec XStream pour accéder à des flux de données depuis une URL arbitraire référençant une ressource dans u...

CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

EUVD-2020-31274

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

Xstream-1.4.17

Xstream-1.4.17 L'environnement de démonstration Xstream ci-dessus a été mis en place par moi-même ; l'environnement d'exploitation des vulnérabilités est basé sur JDK1.8u131. Il prend désormais en charge les tests locaux et l'envoi de paquets à distance via HTTP. Reproduction des vulnérabilités...