grafana-ssrf

grafana-ssrf SSRF autenticado en Grafana. Notas El encabezado de metadatos de Azure se ha añadido a todos los SSRF El encabezado de metadatos de Google se ha añadido a todos los SSRF El SSRF no seguirá redirecciones pase lo que pase, así que asegúrate de que la URL sea directa. Si el inicio de...

PT-2026-30984

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validate enrichment url function in src/handler/http/request/enrichment table/mod.rs fails to block IPv6 addresses because Rust's url crate returns them with surrounding brackets e.g. "::1" not "::1". An authenticate...

Snapchat: Server-Side Request Forgery using Javascript allows to exfill data from Google Metadata

Hey there, I was looking at your ads site with @daeken, we found some weird behavior in the import function of the creative app. Here are the steps: POC - Login to https://business.snapchat.com/ - Go to creative library - New Creative - Under "Topsnap Media", click on "Create" - Click on any of t...