112 matches found
nextssrf
root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...
CVE-2026-44578
CVE-2026-44578 — SSRF de Actualización WebSocket de Next.js Falsificación de Solicitud del Lado del Servidor sin autenticación en despliegues autoalojados de Next.js. Una única solicitud HTTP manipulada extrae credenciales de AWS, secretos y datos de servicios internos de localhost:80...
cve-2018-1002105
Esto fue modificado de https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/. Todo el crédito es para la amable gente de Gravitational. El código PoC original fue modificado para ir un poco más allá de comprobar la vulnerabilidad y ejecutar realmente un comando dentr...
CVE-2026-44578
🚨 CVE-2026-44578 — Vulnerabilidad SSRF en Next.js 📌 Resumen CVE-2026-44578 es una vulnerabilidad de alta gravedad de falsificación de solicitudes del lado del servidor SSRF que afecta aplicaciones Next.js auto-alojadas. Los atacantes pueden explotar solicitudes de actualización WebSocket...
CVE-2026-44578-next-js-ssrf
CVE-2026-44578 — Next.js WebSocket Upgrade SSRF Laboratorio Laboratorio autocontenido para reproducir la vulnerabilidad CVE-2026-44578 CWE-918, SSRF en aplicaciones Next.js self-hosted que usan el servidor Node.js integrado...
CVE-2026-44578-PoC
CVE-2026-44578 - PoC de SSRF en WebSocket de Next.js Vulnerabilidad: Falsificación de solicitudes del lado del servidor en el manejador de actualización WebSocket de Next.js 13.4.13 → 15.5.15, 16.0.0 → 16.1.6 Uso root@kitploit: Detect vulnerability python3 poc.py target.com:3000 --detect Tunnel t...
CVE-2020-7693
CVE-2020-7693 Poc Nota: Confirmo que el payload para CVE-2020-7693 puede ejecutarse en un programa de Bug Bounty Descripción: El manejo incorrecto del encabezado Upgrade con el valor websocket provoca el bloqueo de los contenedores que alojan aplicaciones sockjs. Esto afecta al paquete sockjs...
cve-2018-1002105
CVE-2018-1002105 Utilidad de prueba que verifica si un clúster está afectado por la vulnerabilidad grave de Kubernetes publicada aquí. Un análisis para partes interesadas sobre CVE-2018-1002105 se encuentra en https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/...
cve-2026-69243-poc-aiohttp-smuggling
CVE-2026-69243 — Contrabando de solicitudes en aiohttp CWE-444 Contrabando de solicitudes mediante una actualización WebSocket rechazada en aiohttp O compila la versión en Rust cero dependencias, solo std: root@kitploit: git clone https://github.com/JVBotelho/cve-2026-69243-poc-aiohttp-smuggling ...
verify-ghsa-c4j6-fc7j-m34r
verify-ghsa-c4j6-fc7j-m34r In-band verifier for GHSA-c4j6-fc7j-m34r / CVE-2026-44578 — Server-Side Request Forgery in Next.js via WebSocket upgrade requests. ⚠️ For authorized security testing only. You are responsible for ensuring you have permission to test every target you pass to this script...
aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...
aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...
aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...
aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...
aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...
aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...
Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests
A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery SSRF through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or...
CVE-2026-69243
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...
SUSE CVE-2026-69243
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability...
AIOHTTP: HTTP request smuggling via WebSocket upgrade
SummaryThe HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. ImpactIf using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware ...