blind-ssrf-chains

Introduction What is Server Side Request Forgery SSRF? Server Side Request Forgery occurs when you can coerce a server to make arbitrary requests on your behalf. As the requests are being made by the server, it may be possible to access internal resources due to where the server is positioned in...

Keycloak-12.0.1-CVE-2020-10770

Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requesturi' Server-Side Request Forgery SSRF ciego Sin autenticación Exploit-DB-50405 Resultado esperado: Escaneo de puertos de localhost o hosts accesibles internamente. Destinado únicamente para fines educativos y pruebas en entornos corporativo...

CVE-2022-3590-WordPress-Vulnerability-Scanner

Escáner de Vulnerabilidad CVE-2022-3590 para WordPress Este script de Python está diseñado para verificar si un sitio web de WordPress es vulnerable a la vulnerabilidad CVE-2022-3590. La vulnerabilidad explota un Server-Side Request Forgery SSRF ciego no autenticado en la funcionalidad pingback d...

CVE-2024-41651

Blind SSRF to RCE Exploit - PrestaShop 8.1.7 Este documento describe una explotación de Blind SSRF a RCE en una instalación docker limpia de PrestaShop 8.1.7. Requisitos previos Asegúrate de tener al menos un módulo desactualizado instalado, por ejemplo: psfacetedsearch Descarga el paquete...

CVE-2022-36663-PoC

CVE-2022-36663-PoC Escáner de red interna mediante blind SSRF en Gluu IAM Gluu IAM es vulnerable a blind SSRF, el cual puede ser explotado para escanear la red interna en busca de puertos abiertos dependiendo de los tiempos de respuesta. https://nvd.nist.gov/vuln/detail/CVE-2022-36663 Para...

CVE-2026-104440 YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter

YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to make arbitrary server-side requests via the idtypeannonce parameter of /api/entries/bazarlist. Because isValidURL always returns true, attackers can supply internal URLs fetche...

CVE-2026-104440 YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter

YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to make arbitrary server-side requests via the idtypeannonce parameter of /api/entries/bazarlist. Because isValidURL always returns true, attackers can supply internal URLs fetche...

Security update for helm

This update for helm fixes the following issues: CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction bsc1281104. CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal...

SUSE-SU-2026:4417-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction bsc1281104. - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows...

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Ciego-SSRF-a-Ejecución-Remota-de-Código-Shellshock-Informe-Profesional-de-Bug-Bounty Este repositorio contiene un informe profesional de bug bounty que demuestra la explotación exitosa de una vulnerabilidad de SSRF Ciego que alcanzó un endpoint CGI interno vulnerable a Shellshock CVE-2014-6271. S...

BlackThrone

BlackThrone PHP BlackThrone Script Una alternativa de código abierto a burp collaborator BlackThrone creado para detectar tráfico websockets y HTTP en el sitio web principal, proporcionando algunos encabezados del servidor e información del cliente. BlackThrone es una herramienta basada en web pa...

Skype for Business 2019 (SfB) - Blind Server-side Request Forgery

Skype Pre-Auth Server-side Request Forgery SSRF vulnerability id: CVE-2023-41763 info: name: Skype for Business 2019 SfB - Blind Server-side Request Forgery author: hateshape severity: medium description: | Skype Pre-Auth Server-side Request Forgery SSRF vulnerability impact: | Unauthenticated...

SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery

SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...

CVE-2026-73315

CVE-2026-73315: SSRF through PayPal certificate URL XenForo before 2.3.13 fetches the certificate URL supplied by a PayPal REST webhook without restricting its destination. What happens The callback handler passes PAYPAL-CERT-URL to XenForo's trusted HTTP reader. It does not require a PayPal...

CVE-2026-41177-Squidex-CMS

CVE-2026-41177: Squidex CMS Blind SSRF Technical research and analysis for CVE-2026-41177: A Blind Server-Side Request Forgery SSRF vulnerability in the Squidex CMS Restore API. Vulnerability Overview CVE ID: CVE-2026-41177 Affected Component: Squidex API: Backup / Restore Engine /api/apps/restor...

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF via the UPnP MediaRenderer service...

WordPress-6.9.1-Blind-SSRF

WordPress-6.9.1-Blind-SSRF El exploit no tiene CVE asignado. Versiones afectadas 6.8 - 6.8.3 6.9 - 6.9.1 WordPress = 6.9.1 - SSRF Ciego no autenticado mediante descubrimiento de Pingback XML-RPC prueba de concepto PoC Uso 1. Instale requests si aún no está instalado pip install requests 2. Cambie...

wonderplugin

Wonderplugin For RCE DONT USE THIS FAKE PLUGIN ON YOUR PRODUCTION WEB SERVER! This repository purposed for test a vulnerability on wonderCMS, this fake plugin contain backdoor web shell, you can find it on evil.php file. Related Article WonderCMS 3.1.3 - Authenticated RCE & Blind SSRF Vulnerabili...

CVE-2023-49471

CVE-2023-49471 Tipo de vulnerabilidad Blind SSRF Producto y versión afectados Bar assistant / -----------------------------8290129562507108753887567115 Content-Disposition: form-data; name...

CVE-2022-3590-WordPress-Vulnerability-Scanner

CVE-2022-3590 Escáner de Vulnerabilidad para WordPress Este script de Python está diseñado para comprobar si un sitio web de WordPress es vulnerable a la vulnerabilidad CVE-2022-3590. La vulnerabilidad explota un Server-Side Request Forgery SSRF ciego no autenticado en la función pingback de...