EUVD-2026-92263

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...

Server-Side Request Forgery (SSRF)

java-json-tools jackson-coreutils is vulnerable to server-side request forgery SSRF. The vulnerability is due to improper URL validation in the JsonLoader.fromURL function, which allows a remote attacker to manipulate the URL and cause the server to send unauthorized requests to attacker-controll...

CVE-2026-33626-Lab

CVE-2026-33626 — LMDeploy विज़न-लैंग्वेज SSRF लैब अवलोकन यह रिपॉज़िटरी CVE-2026-33626 को दोहराती है, जो LMDeploy के विज़न-लैंग्वेज इमेज लोडिंग पथ में एक सर्वर-साइड रिक्वेस्ट फोर्जरी SSRF भेद्यता है। भेद्य व्यवहार तब होता है जब LMDeploy एक इमेज URL प्राप्त करता है और सर्वर-साइड इमेज लोडर उस URL को...

CVE-2026-105301 Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301

A flaw exists in the X.509 client-certificate authenticator of Keycloak , an identity and access management solution. When configured to check certificate revocation via CRL Distribution Points or OCSP , the server may process a specially crafted certificate provided by an attacker. This causes K...

EUVD-2026-92255

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301 Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2023-27163-exploit

CVE-2023-27163 — request-baskets SSRF एक्सप्लॉइट मैंने यह एक्सप्लॉइट CVE-2023-27163 को लक्षित करने के लिए लिखा है, जो request-baskets के ≤ 1.2.1 संस्करणों में पाई जाने वाली Server-Side Request Forgery SSRF भेद्यता है। यह दोष /api/baskets/name एंडपॉइंट में मौजूद है, जहाँ forwardurl पैरामीटर हमलावर...

CVE-2026-44578-next-js-ssrf

CVE-2026-44578 — SSRF par mise à niveau WebSocket Next.js Laboratoire Laboratoire autonome pour reproduire la vulnérabilité CVE-2026-44578 CWE-918, SSRF dans les applications Next.js auto-hébergées qui utilisent le serveur Node.js intégré. Champ| Valeur ---|--- CVE| CVE-2026-44578 GHSA|...

CVE-2026-44578-PoC

CVE-2026-44578 - Next.js WebSocket SSRF PoC कमजोरी: Next.js WebSocket अपग्रेड हैंडलर में सर्वर-साइड रिक्वेस्ट फोर्जरी 13.4.13 → 15.5.15, 16.0.0 → 16.1.6 उपयोग Detect vulnerability python3 poc.py target.com:3000 --detect Tunnel to internal Redis python3 poc.py target.com:3000 --internal...

cve-2026-46391

CVE-2026-46391 - كشف بيانات الاعتماد عبر SSRF في @haxtheweb/open-apis إثبات مفهوم لـ CVE-2026-46391. يُطلق ثغرة SSRF في نقطة النهاية cacheAddress الخاصة بـ @haxtheweb/open-apis ويلتقط بيانات اعتماد حساب الخدمة المرسلة في رد الاتصال. البناء go build -o cve-2026-46391 . الاختبار go test ./...

PT-2026-106056

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

PT-2026-106060

Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatar url from provider user data through a server-side HTTP request without internal IP validation and follows redirects by default. An attacker can provide an avatar URL that...

PT-2026-106055

Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEA HOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The four outbound requests in the Gitea OAuth flow are derived from this unvalidated host and do not call...

CVE-2026-104976: Server-Side Request Forgery (SSRF)

Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEAHOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The four outbound requests in the Gitea OAuth flow are derived from this unvalidated host and do not call...

EUVD-2026-92781

Feehi CMS 2.1.1 contains a Server-Side Request Forgery SSRF vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopback or link-local addresses, allowing an attacker to make the server probe internal HTTP services through response differences...

CVE-2026-95265

Feehi CMS 2.1.1 contains a Server-Side Request Forgery SSRF vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopback or link-local addresses, allowing an attacker to make the server probe internal HTTP services through response differences...

CVE-2026-105290: Server-Side Request Forgery (SSRF)

A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. It is...

The vulnerability of the StaticFiles.lookup_path() function in the Starlette ASGI framework for web development allows a attacker to perform an SSRF attack.

The vulnerability of the StaticFiles.lookuppath function in the Starlette ASGI framework for web development is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...