rwsploit

Escáner Oracle Reports rwservlet ⚠️ Solo para uso autorizado. Ejecute esta herramienta únicamente contra sistemas que posea o para los que tenga permiso explícito por escrito. El uso no autorizado es ilegal. Un escáner de explotación enfocado para Oracle Reports Server rwservlet que apunta a...

CVE-2021-40822

CVE-2021-40822 SSRF GeoServer Article: https://gccybermonks.com/posts/cve-2021-40822/ Lab: Clone this repository: root@kitploit: git clone https://github.com/phor3nsic/CVE-2021-40822.git Start Lab: root@kitploit: cd CVE-2021-40822 && docker-compose up Check if this target is vulnerable:...

Jira <8.4.0 - Server-Side Request Forgery

Jira before 8.4.0 is susceptible to server-side request forgery. The /plugins/servlet/gadgets/makeRequest resource contains a logic bug in the JiraWhitelist class, which can allow an attacker to access the content of internal network resources and thus modify data, and/or execute unauthorized...

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364: Apache CXF MTOM XOP:Include SSRF to LFI Exploit ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This proof-of-concept exploit is provided for educational purposes to help security professionals understand the vulnerability and protect their systems...

CVE-2024-5736

CVE-2024-5736 AdmirorFrames Extensión de Joomla! 5.0 - Falsificación de Solicitud del Lado del Servidor Server-Side Request Forgery Cronología Vulnerabilidad reportada al proveedor: 26.01.2024 Nueva versión corregida 5.0 lanzada: 06.06.2024 Divulgación pública: 28.06.2024 Descripción Falsificació...

EUVD-2026-84007

draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, deployments with ENABLEDRAWIOPROXY=1 are vulnerable to server-side request forgery because src/main/java/com/mxgraph/online/Utils.java performs the private-address check in Utils.sanitizeUrl using one DN...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - Unauthenticated Server-Side Request Forgery Description The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This...

security-research

Investigación de Seguridad Vulnerabilidades que he reportado a la Apache Software Foundation, divulgadas a través del proceso de seguridad de la ASF. 46 CVE en 15 proyectos , de 2023 a 2026. Cuando existe un reproductor público, se enlaza. Cada uno es un proyecto mínimo y autocontenido que...

CVE-2026-20230

CVE-2026-20230 - Cisco Unified CM ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone...

CVE-2026-44578

🚨 CVE-2026-44578 — Vulnerabilidad SSRF en Next.js 📌 Resumen CVE-2026-44578 es una vulnerabilidad de alta gravedad de falsificación de solicitudes del lado del servidor SSRF que afecta aplicaciones Next.js auto-alojadas. Los atacantes pueden explotar solicitudes de actualización WebSocket...

CVE-2023-27163---SSRF-Baskets-Requests

CVE-2023-27163---SSRF-Baskets-Requests Create by TheAlchimist root@kitploit: cve-2023-27163-ssrfbaskets.py example : cve-2023-27163-ssrfbaskets.py http://mysite.com http://localhost...

basketcraft

basketcraft this is a script that exploits the CVE-2023-27163 vulnerability which is an SSRF in the request-baskets version 1.2.1 SSRF on Request-Baskets CVE-2023–27163 CVE-2023–27163 represents a critical Server-Side Request Forgery SSRF vulnerability that was identified in Request-Baskets,...

wargame_Re-LS

CVE-2025-0184 DOCX SSRF CTF Challenge Quick Start root@kitploit: 1. Setup and Build make setup make build 2. Start Services make up 3. Web Access open http://localhost:8080 Goal Access the internal Admin service port 3003 and obtain the flag! Expected Flag : CTFflagreadme Exploit root@kitploit: c...

CVE-2026-64849-poc-lab

Laboratorio de Seguridad — Explotación de SSRF en MLflow Webhooks CVE-2026-64849 · MLflow Uso restringido: material de laboratorio, únicamente para redes y entornos autorizados. Ver Aviso legal. 1. Resumen ejecutivo...

devarea

DevArea — HackTheBox Platform: HackTheBox OS: Linux Status: Retired — full walkthrough published. Full walkthrough: l3dsec.com/walkthroughs/devarea-htb Attack Chain root@kitploit: nmap → 21 FTP anon + 80 + 8080 Jetty + 8888 Hoverfly → FTP anon → employee-service.jar Apache CXF, pre-3.5.5 →...

VMWare-vRealize-SSRF

VMWare-vRealize-SSRF VMWare vRealize SSRF-CVE-2021-21975 USO python CVE-2021-21975.py...

CVE-2025-55182-exploit

⚠️ AVISO LEGAL Esta herramienta es SOLO para pruebas de seguridad autorizadas y fines educativos. Solo pruebe sistemas que posea o para los que tenga permiso explícito por escrito. El uso no autorizado es ilegal y poco ético. Los desarrolladores no asumen responsabilidad por el mal uso. Úsela de...

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Description An attacker can exploit this vulnerability by uploading and executing a specially crafted PHP file on the Ferozo hosting platform. When accessed, the file launches a series of SSRF attempts targeting internal...

CVE-2026-85612

CVE-2026-85612 CVE-2026-85612 - OpenPanel Unauthenticated Server-Side Request Forgery SSRF Advisory For full technical details, PoC, affected versions, impact, and remediation: https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-2hff-m67f-2w2w Discoverer Abdul Wassay hotplugin0x01...

CVE-2022-41040

CVE-2022-41040 Microsoft Exchange vulnerable a falsificación de solicitud del lado del servidor Carga útil : /autodiscover/autodiscover.json?@URL/&Email=autodiscover/autodiscover.json%3f@URL /autodiscover/autodiscover.json?@%d.v1.COLLABHERE/&Email=autodiscover/autodiscover.json%3f@%d.v1.COLLABHER...