CVE-2026-79788

Dradis Community Edition versions 5.1.0 through 5.2.0 are affected by a Server-Side Request Forgery (SSRF) vulnerability (CVSS 7.1, HIGH). The root cause is that ProvidersController and AgentsController gate their admin_required authorization on defined?(Dradis::Pro), a constant never defined in ...

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork：app:"Microsoft Exchange Server" Seebug टूलबॉक्स और pocsuite3 का उपयोग करके लिखी गई स्क्रिप्ट MicrosoftExchangeServerSSRFCVE-2021-26855.py, पिछले एक साल के डेटा की खोज के लिए: सफलता दर लगभग: 1500 / 5000 = 30%...

CVE-2022-29078

CVE-2022-29078 ejs 3.1.6 docker vulnérable Installation root@kitploit: git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs Utilisation root@kitploit: http://127.0.0.1:49160/ Exploitatio...

CVE-2022-40634

CVE-2022-40634: Injection de modèle côté serveur FreeMarker dans CrafterCMS En insérant du contenu malveillant dans un modèle FTL, un attaquant peut effectuer des attaques SSTI Server-Side Template Injection, qui peuvent exploiter les objets exposés de FreeMarker pour contourner les restrictions ...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP यह CrushFTP में सर्वर-साइड टेम्पलेट इंजेक्शन SSTI और लोकल फ़ाइल इन्क्लूज़न LFI कमज़ोरी के लिए एक प्रूफ ऑफ कॉन्सेप्ट है। विशेषताएँ CrushFTP सर्वरों में सर्वर-साइड टेम्पलेट इंजेक्शन SSTI और प्रमाणीकरण बायपास के माध्यम से क्रिटिकल गंभीरता वाली...

CVE-2026-70551

CVE-2026-70551 is a Server-Side Request Forgery (SSRF) vulnerability in JFrog Artifactory via VCS remote download. A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL , redirecting the server's request to an attacker-controlle...

PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation

Summary The webhookurl field in the Jobs API silently passes validation when DNS resolution fails socket.gaierror, enabling DNS rebinding attacks. An attacker's domain can initially resolve to a public IP passing validation then switch to an internal IP before the server makes the HTTP request...

CVE-2026-55535 PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validatewebhookurl path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhookurl can later resolve to 127.0.0.1, 169.254.169.254, or another internal address...

EUVD-2026-65516

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validatewebhookurl path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhookurl can later resolve to 127.0.0.1, 169.254.169.254, or another internal address...

CVE-2026-55537 PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validatewebhookurl accepts webhookurl when resolution raises socket.gaierror because the exception path uses except socket.gaierror: pass. JobExecutor.sendwebhook later performs a fresh lookup, allowing DNS chang...

xwiki-cve-2025-24893

XWiki SolrSearch Unauthenticated RCE CVE-2025-24893 Contribuidores Turma 25 da 4ª edição da WhiteHat School Duyeon Lim@endusdksla Resumo O XWiki interpreta a sintaxe wiki e macros no lado do servidor para renderização. O problema é que a página Main.SolrSearch está aberta para convidados, enquant...

EUVD-2026-53582

praisonaiagents has a webcrawl SSRF protection bypass via unchecked redirect targets...

EUVD-2026-65493

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the webcrawl function validates only the initial URL before crawlwithhttpx uses httpx.Clientfollowredirects=True. Redirect targets are not revalidated, so an attacker who influences a crawl target can redirect a public URL ...

CVE-2024-6387

cve-2024-6387-poc uma condição de corrida no manipulador de sinal no servidor OpenSSH sshd...

assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)

A flaw was found in AssertJ. An XML External Entity XXE vulnerability exists in the XmlStringPrettyFormatter component, which is used by the isXmlEqualToCharSequence assertion. If an application processes untrusted XML input using these methods, a remote attacker could exploit this flaw to read...

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc Esta vulnerabilidade é explorada falsificando o registro e os checkins de um agente demon para abrir um socket TCP no teamserver e ler/gravar dados a partir dele. Isso permite que atacantes vazem os IPs de origem dos teamservers e muito mais. Análise completa:...

CVE-2026-79659 Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo

Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata...

CVE-2026-79659

Ech0 before 4.7.3 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the fetchPeerConnectInfo function. The root cause is the use of unvalidated HTTP requests instead of safe request methods with URL validation. An authenticated attacker can supply arbitrary URLs to reach intern...

react2shell

React2Shell إصدار Go React2Shell هو ماسح ثغرات عالي الأداء مكتوب بلغة Go، مصمم خصيصًا لكشف ثغرات تنفيذ الأكواد عن بُعد من جهة الخادم RCE في تطبيقات Next.js CVE-2025-55182 و CVE-2025-66478. تعمل هذه الأداة على تحسين النصوص البرمجية لإثبات المفهوم الحالية من خلال الاستفادة من التزامن الأصلي لـ Go...