383 matches found
Keycloak-12.0.1-CVE-2020-10770
Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requesturi ' Blind Server-Side Request Forgery SSRF Unauthenticated Exploit-DB-50405 Expected outcome: Port scan of localhost or internally accessible hosts. Intended only for educational and testing in corporate environments. This Exploit was...
CVE-2022-36663-PoC
CVE-2022-36663-PoC Internal network scanner through Gluu IAM blind ssrf Gluu IAM is vulnerable to blind SSRF which can be exploited to scan the internal network for open ports depending on response times. https://nvd.nist.gov/vuln/detail/CVE-2022-36663 To check if the target is vulnerable, add...
CVE-2020-10770-keycloak-exploit-poc
Keycloak Blind SSRF POC This is a step by step walk-through about how to test the Blind SSRF CVE-2020-10770 found by Lauritz Holtmann and documented in his blog post. He also briefly explained how to test it. This is just a more detailed explanation. All credits go to Lauritz. Setup I use Docker ...
blind-ssrf-chains
Introduction What is Server Side Request Forgery SSRF? Server Side Request Forgery occurs when you can coerce a server to make arbitrary requests on your behalf. As the requests are being made by the server, it may be possible to access internal resources due to where the server is positioned in...
CVE-2026-78850
Matomo Authenticated SiteContentDetector Blind SSRF Reporter Name: CYBER-SEC Contact: [email protected] Summary Matomo allows an authenticated site administrator to configure a site's mainurl with an internal address. Any authenticated user with view access can later trigger...
SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery
SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...
Skype for Business 2019 (SfB) - Blind Server-side Request Forgery
Skype Pre-Auth Server-side Request Forgery SSRF vulnerability id: CVE-2023-41763 info: name: Skype for Business 2019 SfB - Blind Server-side Request Forgery author: hateshape severity: medium description: | Skype Pre-Auth Server-side Request Forgery SSRF vulnerability impact: | Unauthenticated...
CVE-2022-3590-WordPress-Vulnerability-Scanner
CVE-2022-3590 WordPress Vulnerability Scanner This Python script is designed to check whether a WordPress website is vulnerable to the CVE-2022-3590 vulnerability. The vulnerability exploits an unauthenticated blind Server-Side Request Forgery SSRF in the pingback feature of WordPress. Getting...
Blind-SSRF-CVE-2020-15002
Resumen La lógica en AddFileAction.getImageDataFromUrl para obtener imágenes de URLs externas al manejar /appsuite/api/oxodocumentfilter&action=addfile implementada aquí valida las URLs redirigidas solo después de seguir todas las redirecciones root@kitploit: response =...
CVE-2024-41651
Blind SSRF to RCE Exploit - PrestaShop 8.1.7 This document outlines a Blind SSRF to RCE exploit on a fresh PrestaShop 8.1.7 docker installation. Prerequisites Ensure you have at least an outdated module installed, for example: psfacetedsearch Download the original package: Download psfacetedsearc...
Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report
Ciego-SSRF-a-Ejecución-Remota-de-Código-Shellshock-Informe-Profesional-de-Bug-Bounty Este repositorio contiene un informe profesional de bug bounty que demuestra la explotación exitosa de una vulnerabilidad de SSRF Ciego que alcanzó un endpoint CGI interno vulnerable a Shellshock CVE-2014-6271. S...
BlackThrone
BlackThrone PHP BlackThrone Script Una alternativa de código abierto a burp collaborator BlackThrone creado para detectar tráfico websockets y HTTP en el sitio web principal, proporcionando algunos encabezados del servidor e información del cliente. BlackThrone es una herramienta basada en web pa...
CVE-2023-45966
CVE-2023-45966 Blind SSRF in umputun/remark42 leads to Blind SSRF due to missing title field and insufficient filtering of url field in comment creation request. Additional Information Fixed in commit: efceed6 VulnerabilityType Other CWE-918: Server Side Request Forgery Vendor of Product...
WordPress-6.9.1-Blind-SSRF
WordPress-6.9.1-Blind-SSRF El exploit no tiene CVE asignado. Versiones afectadas 6.8 - 6.8.3 6.9 - 6.9.1 WordPress = 6.9.1 - SSRF Ciego no autenticado mediante descubrimiento de Pingback XML-RPC prueba de concepto PoC Uso 1. Instale requests si aún no está instalado pip install requests 2. Cambie...
CVE-2022-3590-WordPress-Vulnerability-Scanner
CVE-2022-3590 WordPress Vulnerability Scanner This Python script is designed to check whether a WordPress website is vulnerable to the CVE-2022-3590 vulnerability. The vulnerability exploits an unauthenticated blind Server-Side Request Forgery SSRF in the pingback feature of WordPress. Getting...
wonderplugin
Wonderplugin For RCE DONT USE THIS FAKE PLUGIN ON YOUR PRODUCTION WEB SERVER! This repository purposed for test a vulnerability on wonderCMS, this fake plugin contain backdoor web shell, you can find it on evil.php file. Related Article WonderCMS 3.1.3 - Authenticated RCE & Blind SSRF Vulnerabili...
CVE-2026-41177-Squidex-CMS
CVE-2026-41177: Squidex CMS 블라인드 SSRF CVE-2026-41177에 대한 기술 연구 및 분석: Squidex CMS 복원Restore API의 블라인드 서버 측 요청 위조SSRF 취약점. 취약점 개요 CVE ID: CVE-2026-41177 영향을 받는 구성 요소: Squidex API: 백업 / 복원 엔진 /api/apps/restore 영향을 받는 버전: 7.23.0 취약점 유형: 블라인드 SSRF CWE-918, 로컬 파일 상호 작용 CWE-73 요약 Squidex 복원Restore API는...
CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport
CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF via the UPnP MediaRenderer service...
GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool
Summary An unauthenticated server-side request forgery vulnerability lets any anonymous user make the GeoNetwork server issue arbitrary outbound HTTP requests. This gives an external attacker a position inside the server's network, making it possible to make internal requests no matter if the...