9733 matches found
Exploit for Server-Side Request Forgery in F5 Big-Ip_Access_Policy_Manager
CVE-2021-22986Check CVE-2021-22986 Checker Script in Python3...
IBM Planning Analytics Server-Side Request Forgery Vulnerability
IBM Planning Analytics is a planning, budgeting, forecasting and analytics solution. A server-side request forgery vulnerability exists in IBM Planning Analytics 2.0. An attacker could exploit this vulnerability by making arbitrary requests to the internal network or local file system from a...
Exploit for Server-Side Request Forgery in F5 Big-Ip_Access_Policy_Manager
Usage python3 f5rce.py -u Target URL -f Batch detectio...
Microsoft Exchange Server ProxyLogon vulnerability
Added: 03/19/2021 Background Microsoft Exchange is an e-mail server for Microsoft Windows operating systems. Problem A server-side request forgery vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary commands. Resolution Apply the patch referenced in Microsoft Advisory...
Exploit for Server-Side Request Forgery in Microsoft
CVE-2021-26855 e...
Server side request forgery (ssrf)
Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept the request...
Server-Side Request Forgery (SSRF)
akeneo/pim-community-dev is vulnerable to server-side request forgery SSRF. Unhandled redirections on the event subscription URLs allow attackers to send arbitrary HTTP requests on behalf of the server...
Exploit for Server-Side Request Forgery in Microsoft
ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon...
Reportlab Server-Side Request Forgery Vulnerability
ReportLab is a Danish ReportLab company for the creation of data-driven PDF documents and custom vector graphics open source engine . A security vulnerability exists in Reportlab. The vulnerability stems from a server-side request forgery vulnerability that can be triggered by img tags. Currently...
USN-4813-1 jackson-databind vulnerabilities
It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to obtain sensitive information. CVE-2018-11307, CVE-2019-12086, CVE-2019-12814 It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could...
USN-4813-1: Jackson Databind vulnerabilities
It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to obtain sensitive information. CVE-2018-11307, CVE-2019-12086, CVE-2019-12814 It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could...
MagpieRSS 0.72 - (url) Command Injection and Server Side Request Forgery Vulnerability
Exploit Title: MagpieRSS 0.72 - 'url' Command Injection and Server Side Request Forgery Exploit Author: bl4ckh4ck5 Vendor Homepage: http://magpierss.sourceforge.net/ Software Link: https://sourceforge.net/projects/magpierss/files/magpierss/magpierss-0.72/magpierss-0.72.tar.gz/download Version:...
XStream Server-Side Request Forgery Vulnerability
XStream is a simple Java-based library , Java objects serialized to xml and vice versa i.e. : Java objects and xml documents can easily be converted to each other . XStream has a server-side request forgery vulnerability that can be exploited by an attacker to manipulate the processed input strea...
MagpieRSS 0.72 - 'url' Command Injection
Exploit Title: MagpieRSS 0.72 - 'url' Command Injection and Server Side Request Forgery Date: 24 March 2021 Exploit Author: bl4ckh4ck5 Vendor Homepage: http://magpierss.sourceforge.net/ Software Link:...
MagpieRSS 0.72 Code Execution / Server-Side Request Forgery
Exploit Title: MagpieRSS 0.72 - 'url' Command Injection and Server Side Request Forgery Date: 24 March 2021 Exploit Author: bl4ckh4ck5 Vendor Homepage: http://magpierss.sourceforge.net/ Software Link:...
XStream server-side request forgery vulnerability (CNVD-2021-28337)
XStream is a simple Java-based library , Java objects serialized to xml and vice versa i.e. : Java objects and xml documents can be easily converted to each other . XStream has a server-side request forgery vulnerability that can be exploited by an attacker to manipulate the processed input strea...
Exploit for Server-Side Request Forgery in Microsoft
proxylogon my exploit for the proxylogon chain Microsoft Exch...
Microsoft Exchange 2019 - Server-Side Request Forgery
import requests from urllib3.exceptions import InsecureRequestWarning import random import string import sys def idgeneratorsize=6, chars=string.asciilowercase + string.digits: return ''.joinrandom.choicechars for in rangesize if lensys.argv " print"使用方式: python PoC.py mail.btwaf.cn [email protected]...