45243 matches found
CVE-2026-56261 Crawl4AI - Server-Side Request Forgery via Webhook URLs
Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...
CVE-2026-56261 Crawl4AI - Server-Side Request Forgery via Webhook URLs
Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...
CVE-2026-56261
Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...
Spring Cloud Gateway Detection
Detects exposed Spring Cloud Gateway route definitions via Actuator. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed Spring Cloud Gateway actuator routes.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import...
Okta Detection
Detects Okta SSO tenants via OIDC metadata and login UI markers. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Okta identity cloud tenants.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import parsejsonresponse class...
SSRF Cloud Metadata Harvest
Exploit a confirmed SSRF primitive to retrieve cloud provider metadata AWS IMDS, GCP computeMetadata, Azure instance and IAM hints. !/usr/bin/env python3 -- coding: utf-8 -- """ Harvest cloud instance metadata through a confirmed SSRF injection point. Chains from auxiliary/scanner/http/ssrfscanne...
Azure Whoami
Display the Azure identity and subscription context for the current Run Command session !/usr/bin/env python3 -- coding: utf-8 -- import json from kittysploit import from lib.post.azure import AzurePostMixin class ModulePost, AzurePostMixin: info = "name": "Azure Whoami", "description": "Display...
GCP Cloud Run Detection
Detects Cloud Run hostnames and Google Frontend trace headers. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Google Cloud Run services.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import ishtmlresponse class...
Enumerate Azure Resources
List Azure resources visible to the current Run Command session identity !/usr/bin/env python3 -- coding: utf-8 -- import json from kittysploit import from lib.post.azure import AzurePostMixin class ModulePost, AzurePostMixin: info = "name": "Enumerate Azure Resources", "description": "List Azure...
CVE-2026-15378
A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
CVE-2026-15378
A flaw was found in the "guardrails-detectors" component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
EUVD-2026-42858
A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
CVE-2026-15378 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)
A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
CVE-2026-15378
The CVE-2026-15378 entry concerns the guardrails-detectors component where a flaw allows remote attackers to perform a blind Server-Side Request Forgery (SSRF) by submitting a crafted XML Schema Definition string. This can lead to unauthorized access to sensitive information (e.g., credentials fr...
CVE-2026-15378 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)
A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
CVE-2026-15378
A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
GHSA-5G46-HMW3-W78X vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu-melange, linux-qemu...
GHSA-7M9Q-85QJ-RC4G vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu-melange, linux-qemu...