Lucene search
+L

383 matches found

Kitploit
Kitploit
added 2026/09/13 11:13 a.m.6 views

Keycloak-12.0.1-CVE-2020-10770

Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requesturi ' Blind Server-Side Request Forgery SSRF Unauthenticated Exploit-DB-50405 Expected outcome: Port scan of localhost or internally accessible hosts. Intended only for educational and testing in corporate environments. This Exploit was...

5.3CVSS6.5AI score0.69724EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 8:16 a.m.6 views

CVE-2022-36663-PoC

CVE-2022-36663-PoC Internal network scanner through Gluu IAM blind ssrf Gluu IAM is vulnerable to blind SSRF which can be exploited to scan the internal network for open ports depending on response times. https://nvd.nist.gov/vuln/detail/CVE-2022-36663 To check if the target is vulnerable, add...

9.8CVSS8.1AI score0.02468EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 4:43 a.m.4 views

CVE-2020-10770-keycloak-exploit-poc

Keycloak Blind SSRF POC This is a step by step walk-through about how to test the Blind SSRF CVE-2020-10770 found by Lauritz Holtmann and documented in his blog post. He also briefly explained how to test it. This is just a more detailed explanation. All credits go to Lauritz. Setup I use Docker ...

5.3CVSS0.69724EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 2:47 a.m.8 views

blind-ssrf-chains

Introduction What is Server Side Request Forgery SSRF? Server Side Request Forgery occurs when you can coerce a server to make arbitrary requests on your behalf. As the requests are being made by the server, it may be possible to access internal resources due to where the server is positioned in...

6.1AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/13 2:07 a.m.6 views

CVE-2026-78850

Matomo Authenticated SiteContentDetector Blind SSRF Reporter Name: CYBER-SEC Contact: [email protected] Summary Matomo allows an authenticated site administrator to configure a site's mainurl with an internal address. Any authenticated user with view access can later trigger...

5.9AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.153 views

SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery

SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...

5.3CVSS6.5AI score0.61736EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.263 views

Skype for Business 2019 (SfB) - Blind Server-side Request Forgery

Skype Pre-Auth Server-side Request Forgery SSRF vulnerability id: CVE-2023-41763 info: name: Skype for Business 2019 SfB - Blind Server-side Request Forgery author: hateshape severity: medium description: | Skype Pre-Auth Server-side Request Forgery SSRF vulnerability impact: | Unauthenticated...

5.3CVSS6.9AI score0.90353EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/12 6:43 p.m.3 views

CVE-2022-3590-WordPress-Vulnerability-Scanner

CVE-2022-3590 WordPress Vulnerability Scanner This Python script is designed to check whether a WordPress website is vulnerable to the CVE-2022-3590 vulnerability. The vulnerability exploits an unauthenticated blind Server-Side Request Forgery SSRF in the pingback feature of WordPress. Getting...

5.9CVSS6.3AI score0.0315EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 3:29 p.m.8 views

Blind-SSRF-CVE-2020-15002

Resumen La lógica en AddFileAction.getImageDataFromUrl para obtener imágenes de URLs externas al manejar /appsuite/api/oxodocumentfilter&action=addfile implementada aquí valida las URLs redirigidas solo después de seguir todas las redirecciones root@kitploit: response =...

5CVSS6AI score0.0159EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 1:59 p.m.7 views

CVE-2024-41651

Blind SSRF to RCE Exploit - PrestaShop 8.1.7 This document outlines a Blind SSRF to RCE exploit on a fresh PrestaShop 8.1.7 docker installation. Prerequisites Ensure you have at least an outdated module installed, for example: psfacetedsearch Download the original package: Download psfacetedsearc...

9.8CVSS5.9AI score0.01263EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 7:41 a.m.8 views

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Ciego-SSRF-a-Ejecución-Remota-de-Código-Shellshock-Informe-Profesional-de-Bug-Bounty Este repositorio contiene un informe profesional de bug bounty que demuestra la explotación exitosa de una vulnerabilidad de SSRF Ciego que alcanzó un endpoint CGI interno vulnerable a Shellshock CVE-2014-6271. S...

10CVSS8.2AI score0.99999EPSS
SaveExploits146
Kitploit
Kitploit
added 2026/09/11 3:36 a.m.7 views

BlackThrone

BlackThrone PHP BlackThrone Script Una alternativa de código abierto a burp collaborator BlackThrone creado para detectar tráfico websockets y HTTP en el sitio web principal, proporcionando algunos encabezados del servidor e información del cliente. BlackThrone es una herramienta basada en web pa...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 9:32 p.m.5 views

CVE-2023-45966

CVE-2023-45966 Blind SSRF in umputun/remark42 leads to Blind SSRF due to missing title field and insufficient filtering of url field in comment creation request. Additional Information Fixed in commit: efceed6 VulnerabilityType Other CWE-918: Server Side Request Forgery Vendor of Product...

7.5CVSS7.4AI score0.00586EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 5:04 p.m.19 views

WordPress-6.9.1-Blind-SSRF

WordPress-6.9.1-Blind-SSRF El exploit no tiene CVE asignado. Versiones afectadas 6.8 - 6.8.3 6.9 - 6.9.1 WordPress = 6.9.1 - SSRF Ciego no autenticado mediante descubrimiento de Pingback XML-RPC prueba de concepto PoC Uso 1. Instale requests si aún no está instalado pip install requests 2. Cambie...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:31 p.m.8 views

CVE-2022-3590-WordPress-Vulnerability-Scanner

CVE-2022-3590 WordPress Vulnerability Scanner This Python script is designed to check whether a WordPress website is vulnerable to the CVE-2022-3590 vulnerability. The vulnerability exploits an unauthenticated blind Server-Side Request Forgery SSRF in the pingback feature of WordPress. Getting...

5.9CVSS6.3AI score0.0315EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/10 1:36 a.m.7 views

wonderplugin

Wonderplugin For RCE DONT USE THIS FAKE PLUGIN ON YOUR PRODUCTION WEB SERVER! This repository purposed for test a vulnerability on wonderCMS, this fake plugin contain backdoor web shell, you can find it on evil.php file. Related Article WonderCMS 3.1.3 - Authenticated RCE & Blind SSRF Vulnerabili...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 12:55 a.m.11 views

CVE-2026-41177-Squidex-CMS

CVE-2026-41177: Squidex CMS 블라인드 SSRF CVE-2026-41177에 대한 기술 연구 및 분석: Squidex CMS 복원Restore API의 블라인드 서버 측 요청 위조SSRF 취약점. 취약점 개요 CVE ID: CVE-2026-41177 영향을 받는 구성 요소: Squidex API: 백업 / 복원 엔진 /api/apps/restore 영향을 받는 버전: 7.23.0 취약점 유형: 블라인드 SSRF CWE-918, 로컬 파일 상호 작용 CWE-73 요약 Squidex 복원Restore API는...

5.5CVSS5.9AI score0.00329EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 12:55 a.m.7 views

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF via the UPnP MediaRenderer service...

4.7CVSS5.9AI score0.00305EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2026/09/09 11:43 p.m.12 views

GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool

Summary An unauthenticated server-side request forgery vulnerability lets any anonymous user make the GeoNetwork server issue arbitrary outbound HTTP requests. This gives an external attacker a position inside the server's network, making it possible to make internal requests no matter if the...

SaveExploits0References3Affected Software1
Kitploit
Kitploit
added 2026/09/09 5:04 a.m.5 views

CVE-2023-49471

CVE-2023-49471 Tipo de vulnerabilidad Blind SSRF Producto y versión afectados Bar assistant / -----------------------------8290129562507108753887567115 Content-Disposition...

8.8CVSS7.8AI score0.0113EPSS
SaveExploits1
Rows per page
Query Builder