Lucene search
+L

7 matches found

Kitploit
Kitploit
added 2026/08/27 8:46 a.m.4 views

CVE-2026-33752

CVE-2026-33752 CVE-2026-33752 SSRF basato su reindirizzamento che porta all'accesso alla rete interna in curlcffi Riepilogo curlcffi non limita le richieste agli intervalli IP interni e segue automaticamente i reindirizzamenti tramite la libreria libcurl sottostante. Per questo motivo, un URL...

8.6CVSS5.3AI score0.00463EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 3:09 a.m.3 views

undetected-httpx

undetected-httpx undetected-httpx é um kit de ferramentas de sondagem HTTP multifuncional inspirado no httpx. Ele é especificamente projetado para contornar infraestruturas modernas anti-bot, imitando assinaturas reais de navegadores. Os clientes HTTP tradicionais são facilmente identificados e...

5.4AI score
SaveExploits0
OSV
OSV
added 2026/07/13 2:36 p.m.11 views

PYSEC-2026-2431 curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)

Summary curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to internal services such as cloud metadata endpoints. In addition, curlcffi’s TLS impersonation...

8.6CVSS6.1AI score0.00463EPSS
SaveExploits1References5
NVD
NVD
added 2026/04/06 4:16 p.m.9 views

CVE-2026-33752

curlcffi is the a Python binding for curl. Prior to 0.15.0, curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to internal services such as cloud metadata...

8.6CVSS0.00463EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/04/06 3:01 p.m.4 views

CVE-2026-33752 Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass)

curlcffi is the a Python binding for curl. Prior to 0.15.0, curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to internal services such as cloud metadata...

8.6CVSS5.9AI score0.00463EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2024/10/22 6:15 p.m.56 views

curl_cffi bundles a version of libcurl affected by High Severity vulnerability

Summary curlcffi is potentially affected by High Severity vulnerability CVE-2023-38545 in libcurl=8.5, which is not affected by this issue...

9.8CVSS7.2AI score0.78483EPSS
SaveExploits6References3Affected Software1
OSV
OSV
added 2024/10/22 6:15 p.m.52 views

GHSA-3VPC-4P9P-47HC curl_cffi bundles a version of libcurl affected by High Severity vulnerability

Summary curlcffi is potentially affected by High Severity vulnerability CVE-2023-38545 in libcurl=8.5, which is not affected by this issue...

9.1AI score
SaveExploits0References3
Rows per page
Query Builder