CVE-2023-27163-exploit

CVE-2023-27163 — استغلال SSRF في request-baskets لقد كتبت هذه الأداة لاستهداف CVE-2023-27163 ، وهي ثغرة تزوير طلبات من الخادم SSRF موجودة في إصدارات request-baskets ≤ 1.2.1. يقع الخلل في نقطة النهاية /api/baskets/name، حيث يسمح الباراميتر forwardurl للمهاجم بجعل الخادم يصدر طلبات HTTP عشوائية نيا...

CVE-2026-44578-next-js-ssrf

CVE-2026-44578 — SSRF par mise à niveau WebSocket Next.js Laboratoire Laboratoire autonome pour reproduire la vulnérabilité CVE-2026-44578 CWE-918, SSRF dans les applications Next.js auto-hébergées qui utilisent le serveur Node.js intégré. Champ| Valeur ---|--- CVE| CVE-2026-44578 GHSA|...

CVE-2026-44578-PoC

CVE-2026-44578 - PoC لثغرة SSRF عبر WebSocket في Next.js الثغرة: تزوير الطلبات من جانب الخادم SSRF في معالج ترقية WebSocket في Next.js 13.4.13 → 15.5.15, 16.0.0 → 16.1.6 الاستخدام Detect vulnerability python3 poc.py target.com:3000 --detect Tunnel to internal Redis python3 poc.py target.com:3000...

cve-2026-46391

CVE-2026-46391 - Exposition d'identifiants via SSRF dans @haxtheweb/open-apis Preuve de concept pour CVE-2026-46391. Déclenche la vulnérabilité SSRF dans le endpoint cacheAddress de @haxtheweb/open-apis et capture les identifiants du compte de service envoyés dans le callback. Build go build -o...

PT-2026-106056

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

PT-2026-104784

A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performing a manipulation of the argument url results in server-side...

CVE-2026-95265

Feehi CMS 2.1.1 is vulnerable to a Server-Side Request Forgery (SSRF) in the UEditor catchimage endpoint. The root cause is insufficient private-IP validation, which fails to block loopback or link-local addresses. This allows an attacker to probe internal HTTP services by analyzing response diff...

EUVD-2026-92781

Feehi CMS 2.1.1 contains a Server-Side Request Forgery SSRF vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopback or link-local addresses, allowing an attacker to make the server probe internal HTTP services through response differences...

PT-2026-106052

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-30242 validates webhook IP addresses only when the webhook is created in apps/api/plane/app/serializers/webhook.py. The delivery task in apps/api/plane/bgtasks/webhook task.py performs a separate DNS resolution...

CVE-2026-95265

Feehi CMS 2.1.1 contains a Server-Side Request Forgery SSRF vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopback or link-local addresses, allowing an attacker to make the server probe internal HTTP services through response differences...

CVE-2026-105301: Server-Side Request Forgery (SSRF)

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

PT-2026-106226

Feehi CMS 2.1.1 contains a Server-Side Request Forgery SSRF vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopback or link-local addresses, allowing an attacker to make the server probe internal HTTP services through response differences...

PT-2026-106210

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists in the app.util.ssrf/blocked-address? endpoint where Java InetAddress predicates fail to classify NAT64, 6to4, or Teredo addresses and only apply CIDR checks to IPv4 values. This allo...

CVE-2026-105263: Server-Side Request Forgery (SSRF)

A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performing a manipulation of the argument url results in server-side...

PT-2026-106229

Name of the Vulnerable Software and Affected Versions O2OA versions prior to 10.0.1-ce Description A flaw in the General Module allows for server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an unintended location. This issue occurs within the...

CVE-2026-105238: Server-Side Request Forgery (SSRF)

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...

PT-2026-104735

Name of the Vulnerable Software and Affected Versions ChatGPTNextWeb NextChat versions prior to 2.16.2 Description A flaw in the Proxy Fallback Handler component allows for server-side request forgery, which occurs when an attacker can induce the server to make requests to an unintended location...

CVE-2026-63269: Server-Side Request Forgery (SSRF)

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In...

PT-2026-106201

Name of the Vulnerable Software and Affected Versions Ghost versions 1.18.0 through 6.26.0 Description A Server-Side Request Forgery SSRF issue exists in the webhooks feature. This allows staff users to probe internal hosts from the Ghost server. SSRF is a flaw that allows an attacker to induce t...

CVE-2026-95265

Feehi CMS 2.1.1 contains a Server-Side Request Forgery SSRF vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopback or link-local addresses, allowing an attacker to make the server probe internal HTTP services through response differences...