125 matches found
CVE-2026-78500 Dimension Blind SSRF via Database Test Connection Feature
A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
CVE-2026-78500
WatchGuard Dimension contains a blind server-side request forgery (SSRF) vulnerability in the Database Server Test configuration. An authenticated privileged attacker can use this to enumerate exposed network services on adjacent network systems . The CVSS 4.0 base score is 5.1 (MEDIUM) , with an...
CVE-2026-78500 Dimension Blind SSRF via Database Test Connection Feature
A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
PT-2026-82846
A server-side request forgery SSRF vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
PT-2026-82849
A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
PT-2026-82847
A server-side request forgery SSRF vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...
CVE-2026-72784: Server-Side Request Forgery (SSRF)
Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 contain a server-side request forgery vulnerability in the GraphQL save Asset mutation, which fetches an attacker-supplied URL server-side. The anti-SSRF validation is incomplete: validateIp does not cover CGNAT...
CVE-2026-51833: Server-Side Request Forgery (SSRF)
Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to add/save RSS feeds can enumerate internal services ports or expose the original IP address of the server...
CVE-2026-63306: Server-Side Request Forgery (SSRF)
stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed endpoints that accept arbitrary URLs without DNS resolution filtering or private IP range validation. Attackers can enumerate internal services, fingerprint applications, and rea...
metasploitable-vulnerability-mapping-with-nmap
Metasploitable Vulnerability Assessment Network Enumeration...
kioptrix-level1-writeup
Kioptrix Level 1 — Penetration Test Write-up A full walkthrou...
Boot2Root
Boot2Root A cybersecurity challenge focused on penetration...
windows7-eternalblue-lab
MS17-010 EternalBlue Exploitation Lab Hands-on penetration t...
CVE-2026-49979
Appsmith prior to version 1.99 exposes a vulnerability in the POST /api/v1/admin/send-test-email endpoint. An attacker can supply smtpHost and smtpPort values to establish a raw JavaMail TCP connection, bypassing WebClientUtils.IP_CHECK_FILTER (which only applies to Spring WebClient HTTP requests...
WPProbe Plugin Enumeration Tool 0.12.3
A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...
AINEE
Autonomous Internal Network Exploitation Engine The Autonomou...
Nezha's private services (`EnableShowInService: false`) are enumerable via per-server endpoints, leaking name and timing data
Private services EnableShowInService: false are enumerable via per-server endpoints, leaking name and timing data CWE: CWE-285 Improper Authorization via CWE-200 Exposure of Sensitive Information to an Unauthorized Actor and CWE-863 Incorrect Authorization — inconsistent gating across data-reader...
auto_exploiter
Auto-Exploiter Framework ⚠️ LEGAL DISCLAIMER — Authorised...