99 matches found
CVE-2026-85612
OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the /misc/favicon and /misc/og endpoints that accept an attacker-supplied url parameter with insufficient validation. Attackers can force the API to fetch arbitrary internal hosts and cloud metadata...
CVE-2026-84175
In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT Web of Things ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without validating the target host, and follows HTTP redirects without re-validating the redirect target and...
EUVD-2026-69894
In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT Web of Things ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without validating the target host, and follows HTTP redirects without re-validating the redirect target and...
CVE-2026-84175
In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT Web of Things ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without validating the target host, and follows HTTP redirects without re-validating the redirect target and...
CVE-2026-84175
Eclipse Ditto versions 3.0.0 through 3.9.6 (and 2.4.0–2.5.x when the WoT integration feature toggle is explicitly enabled) are affected by a Server-Side Request Forgery (SSRF) in the Things service. The service fetches WoT ThingModels over HTTP from URLs supplied by API users without validating t...
CVE-2026-78495
A server-side request forgery SSRF vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
CVE-2026-78500
A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
CVE-2026-78499
A server-side request forgery SSRF vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
CVE-2026-78495 Dimension Server-Side Request Forgery via Remote Backup Connection Test
A server-side request forgery SSRF vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
CVE-2026-78495
A server-side request forgery (SSRF) vulnerability in the WatchGuard Dimension product, specifically in the Remote Backup Connection Test configuration, allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems. The CVSS 4.0 score is 5.3 (MEDIUM...
CVE-2026-78500
WatchGuard Dimension contains a blind server-side request forgery (SSRF) vulnerability in the Database Server Test configuration. An authenticated privileged attacker can use this to enumerate exposed network services on adjacent network systems . The CVSS 4.0 base score is 5.1 (MEDIUM) , with an...
CVE-2026-78500 Dimension Blind SSRF via Database Test Connection Feature
A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
metasploitable-vulnerability-mapping-with-nmap
Metasploitable Vulnerability Assessment Network Enumeration...
kioptrix-level1-writeup
Kioptrix Level 1 — Penetration Test Write-up A full walkthrou...
windows7-eternalblue-lab
MS17-010 EternalBlue Exploitation Lab Hands-on penetration t...
CVE-2026-49979
Appsmith prior to version 1.99 exposes a vulnerability in the POST /api/v1/admin/send-test-email endpoint. An attacker can supply smtpHost and smtpPort values to establish a raw JavaMail TCP connection, bypassing WebClientUtils.IP_CHECK_FILTER (which only applies to Spring WebClient HTTP requests...
Nezha's private services (`EnableShowInService: false`) are enumerable via per-server endpoints, leaking name and timing data
Private services EnableShowInService: false are enumerable via per-server endpoints, leaking name and timing data CWE: CWE-285 Improper Authorization via CWE-200 Exposure of Sensitive Information to an Unauthorized Actor and CWE-863 Incorrect Authorization — inconsistent gating across data-reader...
auto_exploiter
Auto-Exploiter Framework ⚠️ LEGAL DISCLAIMER — Authorised...