59 matches found
CVE-2023-27163-exploit
CVE-2023-27163 — request-baskets SSRF 漏洞利用 我编写此漏洞利用工具用于针对 CVE-2023-27163 ，这是 request-baskets 版本 ≤ 1.2.1 中存在的一个服务端请求伪造（SSRF）漏洞。该缺陷位于 /api/baskets/name 端点，其中 forwardurl 参数允许攻击者让服务器代其发起任意 HTTP 请求。 工作原理 该漏洞利用工具会创建一个恶意“basket”，其 forwardurl 指向内部目标。对该 basket 端点发出的任何请求都会被服务器转发到指定的 URL，从而有效地将服务器变成一个 SSRF...
CVE-2021-27905
CVE-2021-27905 序号| 标题 ---|--- 1| 概述 2| 根本原因 3| 概念验证 4| 缓解措施 8.8.2+ 5| 参考 仅供教育和研究目的使用。请勿在你不拥有或未经明确许可测试的系统上使用此代码。我对任何滥用行为概不负责。 概述 这是一个影响 Apache Solr （/replication?command=fetchindex&masterUrl=http:// Solr 的 ReplicationHandler 会： 1. 接受请求。 2. 使用提供的 masterUrl 下载索引数据。 3. 在内部向该地址发起 HTTP 调用。 概念验证 实验室搭建...
CVE-2026-92566
DataGear through 6.0.0 contains an unauthenticated server-side request forgery (SSRF) vulnerability in the /dataSet/preview/Http endpoint. By supplying a caller-controlled URI, an attacker can issue GET, POST, PUT, PATCH, or DELETE requests to internal services and cloud metadata endpoints, recei...
Server-side Request Forgery (SSRF)
Overview lemur is a Certificate management and orchestration service Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the acmeurl option during the authority update. An attacker can cause the backend to make arbitrary HTTP requests to internal or external...
CVE-2026-15732: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSFR vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses...
CVE-2026-58478 Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL
Sustainable Irrigation Platform SIP through version 5.2.16 contains a server-side request forgery SSRF vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attacke...
CVE-2026-0560
Summary of the vulnerability (CVE-2026-0560): In parisneo/lollms
CVE-2026-32110
SiYuan is a personal knowledge management system. Prior to 3.6.0, the /api/network/forwardProxy endpoint allows authenticated users to make arbitrary HTTP requests from the server. The endpoint accepts a user-controlled URL and makes HTTP requests to it, returning the full response body and...
CVE-2025-56589
A Local File Inclusion LFI and a Server-Side Request Forgery SSRF vulnerability was found in the InsertFromHtmlString function of the Apryse HTML2PDF SDK thru 11.6.0. These vulnerabilities could allow an attacker to read local files on the server or make arbitrary HTTP requests to internal or...
CVE-2019-18394
A Server Side Request Forgery SSRF vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests...
CVE-2022-27873
An attacker can force the victim’s device to perform arbitrary HTTP requests in WAN through a malicious SVG file being parsed by Autodesk Fusion 360’s document parser. The vulnerability exists in the application’s ‘Insert SVG’ procedure. An attacker can also leverage this vulnerability to obtain...
EUVD-2022-32361
Malicious code in bioql PyPI...
EUVD-2024-16199
Malicious code in bioql PyPI...
EUVD-2024-44173
Malicious code in bioql PyPI...
EUVD-2023-2851
Malicious code in bioql PyPI...
EUVD-2023-58628
Malicious code in bioql PyPI...
EUVD-2023-58828
Malicious code in bioql PyPI...
The vulnerability of the GitFlic platform, related to the lack of authentication, allows a malicious user to execute arbitrary HTTP requests on behalf of the server.
The vulnerability of the GitFlic platform’s code-related functionality lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary HTTP requests on behalf of the server...
Server-side Request Forgery (SSRF)
Overview johnbillion/wp-crontrol is a package that allows you to take control of the cron events on your WordPress website. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the wpremoterequest function. An attacker can send arbitrary HTTP requests from the...
CVE-2025-54381 BentoML is Vulnerable to an SSRF Attack Through File Upload Processing
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP...