OsTicket < 1.14.3 - Server Side Request Forgery

SSRF vulnerability exists in osTicket before 1.14.3, allowing an attacker to add malicious files to the server or perform port scanning. id: CVE-2020-24881 info: name: OsTicket 1.14.3 - Server Side Request Forgery author: hnd3884 severity: critical description: | SSRF vulnerability exists in...

EUVD-2026-102478

ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider baseurl. Attackers can set baseurl via the provider config endpoint and trigger POST /api/v1/models/check to...

EUVD-2026-102477

JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations. Attackers can supply loopback, private, or cloud metadata...

CVE-2026-111210

A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment Request Handler. Executing a manipulation of the argument pkitype can lead to server-side request forgery. It is possible to launch the attac...

CVE-2026-111210

The bitcoinj library, version up to 0.17 , contains a Server-Side Request Forgery (SSRF) vulnerability within the Payment Request Handler component. Specifically, the url.openConnection function in the PaymentSession.java file is susceptible to exploitation through the manipulation of the pki_typ...

CVE-2026-111210 bitcoinj Payment Request PaymentSession.java url.openConnection server-side request forgery

A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment Request Handler. Executing a manipulation of the argument pkitype can lead to server-side request forgery. It is possible to launch the attac...

CVE-2026-111313

JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations. Attackers can supply loopback, private, or cloud metadata...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — SonicWall SMA1000 Vulnerability Analysis A cybersecurity project exploring a real-world vulnerability,its potential impact,and how security teams can detect,fix,and verify the issue. Project Overview This project is part of my cybersecurity learning journey. I selected...

CVE-2026-75898

CVE-2026-75898 — RAGFlow Invoke component SSRF Server-Side Request Forgery CWE-918 in RAGFlow's agent workflow "Invoke" component, before 0.26.3. | ---|--- CVE| CVE-2026-75898 CVSS| 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Fixed in| v0.26.3 Fix commits| c4fe68e, e16d1a0 Issue refs|...

CVE-2026-111171

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...

EUVD-2026-102298

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...

halo-2.25.4-CVE-2026-67919

Authenticated Remote Code Execution RCE via Unvalidated Plugin URI Installation in Halo 2.25.4 1. Vulnerability Summary A critical security vulnerability has been identified in Halo version 2.25.4. The application provides an administrative endpoint to install or upgrade plugins from a remote URI...

CVE-2026-26801-pdfmake-ssrf

pdfmake SSRF Vulnerability PoC Vulnerability Summary Field| Value ---|--- Package| pdfmake Version| = 0.3.0-beta.2, CREDENTIALS LEAKED! This proves the vulnerable server made an outbound request to our controlled endpoint. Full Read SSRF npm run exfiltrate The a...

GitLab-SSRF-CVE-2021-22214

CVE-2021-22214 POC for CVE-2021-22214: Gitlab SSRF Description The remote GitLab install contains a Server-side request forgery SSRF vulnerability as a result of the internal network for webhooks being enabled. A remote, unauthenticated attacker can exploit a registration-limited GitLab instance...

CVE-2025-55853

CVE-2025-55853 - Local File Inclusion via Server Side Request Forgery SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery SSRF. About This PoC for CVE-2025-55853 demonstrates Server Side Request Forgery in the webPDF tool webPDF. used to convert files to PDF. The PDF...

CVE-2021-21349

CVE-2021-21349 XStream SSRF XStream Official Announcement CVE-2021-21349 Vulnerability CVE-2021-21349: A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host. Affected Versions...

CVE-2025-45250

CVE-2025-45250 Suggested description MrDoc =0.95 is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file. POC POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie User-Agent: Mozilla/5.0 Windows NT...

poc_proxylogon

pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 This is script was originaly made by celesian to exploit this CVE. Then i updated it to exploit an exchange server vulnerable to SSRF but it got a Shell exploiting the EWS feature, because a client company patched it's exchange server...

CVE-2026-44578

CVE-2026-44578 — Next.js WebSocket Upgrade SSRF Pre-authentication Server-Side Request Forgery in Next.js self-hosted deployments. A single crafted HTTP request extracts AWS credentials, secrets, and internal service data from localhost:80. Field| Value ---|--- CVE| CVE-2026-44578 GHSA|...

CVE-2022-28117

CVE-2022-28117 Navigate CMS = 2.9.4 - Server-Side Request Forgery Authenticated Description A Server-Side Request Forgery SSRF in feedparser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed...