Apache OFBiz < 18.12.11 - Remote Code Execution

The vulnerability allows attackers to bypass authentication to achieve a simple Server-Side Request Forgery SSRF id: CVE-2023-51467 info: name: Apache OFBiz 18.12.11 - Remote Code Execution author: your3cho severity: critical description: | The vulnerability allows attackers to bypass...

Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery

Jenkins GitHub Plugin 1.29.1 and earlier is susceptible to server-side request forgery via GitHubTokenCredentialsCreator.java, which allows attackers to leverage attacker-specified credentials IDs obtained through another method and capture the credentials stored in Jenkins. id: CVE-2018-1000600...

CLEANSTART-2026-DB84744 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

Security vulnerability affects the consul package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

PT-2026-104091

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does not require authentication or a valid nonce on an action that issues a slow server-side loopback request, allowing unauthenticated attackers to exhaust the site's PHP worker pool and make the entire si...

PT-2026-104138

Name of the Vulnerable Software and Affected Versions Smash Balloon Social Post Feed – Simple Social Feeds for WordPress versions prior to 4.13.1 Description Insufficient input sanitization and output escaping in the Admin Builder Preview allow unauthenticated attackers to perform Stored Cross-Si...

VulnCheck KEV: CVE-2020-37278

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

PT-2026-104071

Name of the Vulnerable Software and Affected Versions mcp-server-fetch versions prior to 2026.6.4 mcp-server-everything versions prior to 2026.6.4 Description A server-side request forgery SSRF issue exists in the Fetch Tool component. The vulnerability occurs within the fetch url function locate...

PT-2026-104280

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.6.7 Description A server-side request forgery SSRF issue exists in the Bazar valeur action. Page editors can force the server to fetch arbitrary URLs by manipulating the url parameter. By embedding this action with ...

RHEL 9 : Satellite 6.17.12 Async Update (Critical) (RHSA-2026:74505)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74505 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity t...

dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection

A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection SSTI vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template...

CVE-2025-55182_liyon

CVE-2025-55182 - Удаленное выполнение кода в React Server Components ⚠️ Правовое заявление : Этот инструмент предназначен только для исследований в области безопасности, авторизованного тестирования на проникновение и образовательных целей. Использование этого инструмента против целевых систем без...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — Анализ уязвимости SonicWall SMA1000 Кибербезопасный проект, изучающий реальную уязвимость, её потенциальное влияние и то, как команды безопасности могут обнаруживать, устранять и проверять эту проблему. Обзор проекта Этот проект является частью моего пути в изучении...

CVE-2026-53964

The Document Merge Service is vulnerable to Remote Code Execution (RCE) via Server-Side Template Injection (SSTI) in versions prior to 9.1.0 . The flaw exists because the xltpl library uses a non-sandboxed Jinja environment to process XLSX templates . An attacker can supply malicious template con...

CVE-2026-75898

CVE-2026-75898 — SSRF в компоненте Invoke RAGFlow Подделка серверных запросов Server-Side Request Forgery, CWE-918 в компоненте «Invoke» агентного рабочего процесса RAGFlow, до версии 0.26.3. | ---|--- CVE| CVE-2026-75898 CVSS| 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Исправлено в| v0.26....

cve-2026-4257

CVE-2026-4257 This exploits CVE-2026-4257, a Server-Side Template Injection SSTI vulnerability in the "Contact Form" Wordpress plugin by Supsystic in versions 1.7.36 and before. This vulnerability allows an unauthenticated attacker to achieve Remote Code Execution. The vulnerability exists in the...

halo-2.25.4-CVE-2026-67919

Аутентифицированное удалённое выполнение кода RCE через непроверенную установку плагина по URI в Halo 2.25.4 1. Сводка по уязвимости Критическая уязвимость безопасности обнаружена в версии Halo 2.25.4. Приложение предоставляет административную конечную точку для установки или обновления плагинов...

CVE-2026-33154

Отчёт об уязвимости SSTI в Dynaconf Краткое описание Dynaconf уязвим к инъекции шаблонов на стороне сервера SSTI из-за небезопасной оценки шаблонов в резолвере @Jinja. Когда установлен пакет jinja2, Dynaconf вычисляет выражения шаблонов, встроенные в значения конфигурации, без песочницы sandboxed...

CVE-2026-26801-pdfmake-ssrf

PoC уязвимости SSRF в pdfmake Сводка по уязвимости Поле| Значение ---|--- Пакет| pdfmake Версия| = 0.3.0-beta.2, CREDENTIALS LEAKED! Это доказывает, что уязвимый сервер совершил и...

GitLab-SSRF-CVE-2021-22214

CVE-2021-22214 POC for CVE-2021-22214: Gitlab SSRF Description The remote GitLab install contains a Server-side request forgery SSRF vulnerability as a result of the internal network for webhooks being enabled. A remote, unauthenticated attacker can exploit a registration-limited GitLab instance...

CVE-2026-25731

Уязвимость Server-Side Template Injection SSTI в движке Templite Серьёзность: Высокая CVSS 7.8 Затронутое ПО: calibre Исправлено в версии: 9.2.0 Уведомление: GHSA-xrh9-w7qx-3gcc Краткое описание Уязвимость Server-Side Template Injection SSTI в шаблонизаторе Templite в Calibre позволяет выполнять...