29151 matches found
CVE-2026-88056 Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...
CVE-2026-89049 Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent SSM Agent before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote...
cve-2026-4257
CVE-2026-4257 Esto explota CVE-2026-4257, una vulnerabilidad de inyección de plantillas del lado del servidor SSTI en el plugin "Contact Form" de Wordpress de Supsystic en las versiones 1.7.36 y anteriores. Esta vulnerabilidad permite a un atacante no autenticado lograr la ejecución remota de...
CVE-2026-34724
🚨 CVE-2026-34724 - Zammad 7.0.1 - Inyección de plantillas del lado del servidor SSTI que conduce a ejecución remota de código RCE a través del AI Agent 📌 Resumen Zammad es un popular sistema de helpdesk y atención al cliente de código abierto basado en web. CVE-2026-34724 es una vulnerabilidad de...
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
Summary With the Playwright web loader enabled, Open WebUI checks the address behind a user-submitted URL before allowing the request, then handed the request to the browser to perform. The browser resolved the hostname a second time, on its own, and that answer was never checked. An attacker who...
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
Summary Open WebUI fetches user-supplied URLs on the server for RAG URL ingestion and web search, and screens the resolved addresses so internal destinations cannot be reached. That screen decided whether a destination was external by asking Python's standard library whether the address is global...
CVE-2025-55853
CVE-2025-55853 - Local File Inclusion via Server Side Request Forgery SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery SSRF. About This PoC for CVE-2025-55853 demonstrates Server Side Request Forgery in the webPDF tool webPDF. used to convert files to PDF. The PDF...
CVE-2026-88892
OpenPanel is an analytics platform. In all versions no patched release available at time of publication, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts,...
CVE-2026-88892 OpenPanel SSRF via Unguarded Importer File URL Fetch
OpenPanel is an analytics platform. In all versions no patched release available at time of publication, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts,...
cve-2025-55182
CVE-2025-55182 Exploit en Python Script de Python 3 que puede utilizarse para demostrar CVE-2025-55182. Explota una vulnerabilidad de inyección de JavaScript del lado del servidor en aplicaciones Next.js/React, lo que permite la ejecución remota de código mediante datos de formulario multipart...
CVE-2025-68705
CVE-2025-68705 - RustFS Path Traversal Exploit Description This script exploits a path traversal vulnerability CVE-2025-68705 in RustFS that allows reading arbitrary files on the server. Requirements Python 3.6+ See requirements.txt for dependencies Installation root@kitploit: git clone...
CVE-2026-75898
CVE-2026-75898 — RAGFlow Invoke component SSRF Server-Side Request Forgery CWE-918 in RAGFlow's agent workflow "Invoke" component, before 0.26.3...
Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery
Jenkins GitHub Plugin 1.29.1 and earlier is susceptible to server-side request forgery via GitHubTokenCredentialsCreator.java, which allows attackers to leverage attacker-specified credentials IDs obtained through another method and capture the credentials stored in Jenkins. id: CVE-2018-1000600...
POC_CVE-2025-14700
CVE-2025-14700 PoC para CVE-2025-14700 , una vulnerabilidad de inyección de plantillas del lado del servidor SSTI en Crafty Controller = 4.6.1. Esta vulnerabilidad permite a los usuarios autenticados lograr la ejecución remota de código RCE mediante la inyección de plantillas Jinja2 maliciosas en...
CVE-2026-26801-pdfmake-ssrf
pdfmake SSRF Vulnerability PoC Vulnerability Summary...
GitLab-SSRF-CVE-2021-22214
CVE-2021-22214 POC for CVE-2021-22214: Gitlab SSRF Description The remote GitLab install contains a Server-side request forgery SSRF vulnerability as a result of the internal network for webhooks being enabled. A remote, unauthenticated attacker can exploit a registration-limited GitLab instance...
CVE-2024-6386-WPML-SSTI
Este repositorio no tiene un README...
PT-2026-89700
Summary An XSS vulnerability exists in @angular/platform-server during server-side rendering SSR HTML serialization when traversing ancestor tags across element boundaries. When an application renders untrusted user input within raw-text tags , , , comments, or text nodes inside a that is nested...
PT-2026-89562
A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent SSM Agent before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote...
