CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...

CVE-2019-7616

CVE-2019-7616 POC для CVE-2019-7616 / ESA-2019-09 - Blind SSRF Это всего лишь POC, а не инструмент...

heimdall-unauth-ssrf

Heimdall: Unauthenticated SSRF via testconfig Description...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF через расхождение URL-парсеров Код программы Python vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed = urllib.parse.urlparseurl Only...

EUVD-2026-92430

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

f5_rce_poc

Utilisation python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 L'effet est comme suit : python3 f5rce.py -u 127.0.0.1 --ssrf Après avoir exécuté la commande, tapez exit pour quitter PS : La sortie n'est pas assez esthétique, je la modifierai 😁 À venir Mises à jour :...

PoC-CVE-2025-26529

PoC pour CVE-2025-26529 – Exploitation XSS vers RCE dans Moodle Ceci est une preuve de concept PoC démontrant la chaîne de vulnérabilités SSRF vers XSS → XSS vers RCE dans Moodle. Aperçu J'ai téléchargé tous les fichiers nécessaires pour démontrer la chaîne complète d'exploitation : 1. SSRF vers...

WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by ParkHyunWoo in WordPress Plugin Instapage Plugin versions = 3.7.2...

Yasa-CVE-2023-46229

Yasa-CVE-2023-46229 Python exploit for CVE-2023-46229 with Yasa Описание проекта Данный проект представляет собой Python-эксплойт и экспериментальный отчёт для CVE-2023-46229, только для обучения и исследований. Структура файлов README.md: файл описания проекта 丁云山YasaCVE202346229.pdf: полный...

CallStranger

CallStranger Ce script a été créé par Yunus Çadırcı https://twitter.com/yunuscadirci pour vérifier la vulnérabilité CallStranger CVE-2020-12695. Un attaquant peut utiliser cette vulnérabilité pour : Contourner les solutions DLP pour exfiltrer des données Utiliser des millions de dispositifs UPnP...

BIT-MOODLE-2026-102577 Moodle: ssrf risk in url downloader via ipv4-mapped ipv6 address bypass

A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-host restrictions. By supplying a crafted URL, an attacker can induce the server to make requests to restricted...

westone-CVE-2021-21980-scanner

westone-CVE-2021-21980-scanner Les versions antérieures de VMware vCenter 7.0.2.00100 présentent une vulnérabilité de lecture de fichier arbitraire non autorisée + ssrf + xss Installation et utilisation git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd...

CVE-2026-63269

On Linux , LibreOffice is vulnerable to Local File Inclusion (LFI) and GET Server-Side Request Forgery (SSRF) due to how it handles linked media via GStreamer . An attacker can provide a linked HLS playlist that causes GStreamer to read local files or remote URLs during document loading, potentia...

CVE-2026-63269 LFI and GET SSRF via GStreamer and HLS playlists

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In...

CVE-2026-63269 LFI and GET SSRF via GStreamer and HLS playlists

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In...

CVE-2026-63269

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In...

CVE-2026-63267 LFI and GET SSRF via calcext:data-mappings and csv provider

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

CVE-2026-63267 LFI and GET SSRF via calcext:data-mappings and csv provider

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

CVE-2026-63267

LibreOffice Calc is vulnerable to Local File Inclusion (LFI) and GET Server-Side Request Forgery (SSRF) via the calcext:data-mappings and csv provider. The root cause is that the application automatically fetches external CSV data links saved in a document during the loading process. This allows ...

CVE-2026-63267

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...