Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)

Keycloak 12.0.1 and below allows an attacker to force the server to request an unverified URL using the OIDC parameter requesturi. This allows an attacker to execute a server-side request forgery SSRF attack. id: CVE-2020-10770 info: name: Keycloak = 12.0.1 - requesturi Blind Server-Side Request...

playSMS <1.4.3 - Remote Code Execution

PlaySMS before version 1.4.3 is susceptible to remote code execution because it double processes a server-side template. id: CVE-2020-8644 info: name: playSMS 1.4.3 - Remote Code Execution author: dbrwsky severity: critical description: PlaySMS before version 1.4.3 is susceptible to remote code...

Apache HTTPd Windows UNC - Server-Side Request Forgery

SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note- Existing configurations that access UNC paths will have to configure new...

OsTicket < 1.14.3 - Server Side Request Forgery

SSRF vulnerability exists in osTicket before 1.14.3, allowing an attacker to add malicious files to the server or perform port scanning. id: CVE-2020-24881 info: name: OsTicket 1.14.3 - Server Side Request Forgery author: hnd3884 severity: critical description: | SSRF vulnerability exists in...

xwiki-cve-2025-24893

XWiki SolrSearch 未认证 RCE CVE-2025-24893 贡献者 白帽学校 4期 25班 林斗妍@endusdksla 摘要 XWiki 在服务器端解析并渲染 wiki 语法和宏。问题在于 Main.SolrSearch 页面不仅对访客开放，而且还将用户输入的 text 参数在没有充分验证的情况下作为 XWiki 语法进行评估。 攻击者可以在 text 中插入 groovy 宏，从而在服务器上执行任意 Groovy 代码，并通过 "command".execute 调用操作系统命令。此漏洞无需额外登录或令牌，仅通过单个 GET 请求即可利用。 环境配置 本目录使用官...

PT-2026-104638

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

VMWare-vRealize-SSRF

VMWare-vRealize-SSRF VMWare vRealize SSRF-CVE-2021-21975 USO python CVE-2021-21975.py...

CVE-2022-29078

CVE-2022-29078 | EJS SSTI → RCE White Hat School 4.ª generación clase 32 - Woo Sang-beom @taka3636 Resumen La vulnerabilidad de inyección de plantillas del lado del servidor SSTI en EJS , como en Hello . Internamente, EJS compila la cadena de la plantilla en una función de JavaScript y luego la...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Bypass de autenticación / control de acceso incorrecto en PerfexCRM 3.3.1 inicio de sesión de administrador Resumen Tipo de vulnerabilidad: Control de acceso incorrecto — Bypass de autenticación Producto afectado: PerfexCRM 3.3.1 CVE: CVE-2025-60375 Publicada...

cve-2024-32651

cve-2024-32651 changedetection 通过 SSTI 实现远程代码执行...

CVE-2026-105122

OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwksuri. Attackers can trigger unauthenticated fetches through client-authentication and ID-token...

CVE-2025-55182-exploit

⚠️ 免责声明 此工具仅限授权的安全测试和教育目的使用。 仅测试您拥有或已获得明确书面许可的系统。 未经授权的使用是非法且不道德的。 开发者对滥用行为不承担任何责任。 请负责任地使用，并遵守所有适用法律。 🔍 概述 CVE-2025-55182 是 React/NextJS 应用程序中利用 experimental-form 功能的一个严重服务器端请求伪造（SSRF）和远程代码执行（RCE）漏洞。 此利用工具提供了一种可靠的方式，用于在授权环境中测试和演示该漏洞。 🎯 漏洞详情 CVE ID: CVE-2025-55182 受影响版本： React: 19.0.0 - 19.2.0...

CVE-2026-105122

OpenAM versions prior to 16.1.3 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The root cause is an unvalidated jwks_uri parameter during the registration or modification of OAuth 2.0 clients. An attacker can leverage this to force the server to fetch internal resources, po...

EUVD-2026-92026

OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwksuri. Attackers can trigger unauthenticated fetches through client-authentication and ID-token...

SSRF-CVE-2018-25031-

Este repositorio no tiene un README...

CVE-2025-55182-Test-Server

CVE-2025-55182-Test-Server 在安全环境中体验 react2shell！ Quick Start 克隆仓库 git clone https://github.com/CharlesTheGreat77/CVE-2025-55182-Test-Server cd CVE-2025-55182-Test-Server 运行 Docker 文件 docker compose up --build -d PoC curl -s -X POST http://localhost:3000/adfa \ -H "User-Agent: Mozilla/5.0 Macintos...

CVE-2025-45955

CVE-2025-45955 Falsificación de solicitudes del lado del servidor en DonWeb Ferozo CVE-2025-45955 Descripción Un atacante puede explotar esta vulnerabilidad subiendo y ejecutando un archivo PHP especialmente manipulado en la plataforma de hosting Ferozo. Cuando se accede a él, el archivo lanza un...

CVE-2022-29078

CVE-2022-29078 漏洞 ejs 3.1.6 docker 设置 git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs 使用 http://127.0.0.1:49160/ 漏洞利用 在浏览器中 http://127.0.0.1:49160/page?id=2&settingsview...

CVE-2022-41040

CVE-2022-41040 Microsoft Exchange vulnerable a falsificación de solicitud del lado del servidor Carga útil : /autodiscover/autodiscover.json?@URL/&Email=autodiscover/autodiscover.json%3f@URL /autodiscover/autodiscover.json?@%d.v1.COLLABHERE/&Email=autodiscover/autodiscover.json%3f@%d.v1.COLLABHER...

CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...