Lucene search
+L

70 matches found

Kitploit
Kitploit
•added 2026/10/05 3:13 p.m.•14 views

CVE-2021-41277

CVE-2021-41277 metabase 익스플로잇을 위한 간단한 프로그램 설치 gem install httparty gem install colorize gem install timeout ruby CVE.rb...

10CVSS7.2AI score0.97178EPSS
SaveExploits8
Kitploit
Kitploit
•added 2026/10/01 11:55 a.m.•15 views

manageengine-auditad-cve-2022-28219

제 CVE-2022-28219 분석을 지원하는 코드입니다. Ruby와 Rubygems가 설치된 환경에서 실행하려면: gem install httparty ruby ./manageengine-poc.rb 이것은 안정적인 익스플로잇이 아닌 개념 증명PoC용으로 설계되었습니다. calc만 실행합니다. :...

9.8CVSS8.3AI score0.97193EPSS
SaveExploits6
Veracode
Veracode
•added 2026/02/23 7:51 a.m.•14 views

Arbitrary File Upload

httparty is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper request validation which allows an attacker to manipulate requests and access internal services or expose sensitive data such as API keys...

10CVSS6AI score0.0055EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2026/01/13 10:59 a.m.•16 views

Server-Side Request Forgery (SSRF)

httparty is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of user-supplied URLs, which allows an attacker to force the application to send unauthorized requests to internal servers and potentially leak sensitive information such as API keys...

8.8CVSS5.8AI score0.00302EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/24 6:32 a.m.•18 views

CVE-2025-68696

A flaw was found in httparty, an API tool. This Server-Side Request Forgery SSRF vulnerability allows an attacker to trick the server into making requests to internal resources or other external domains on their behalf. This can lead to the disclosure of sensitive information, such as API keys, a...

9.3CVSS5.8AI score0.00302EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/12/24 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2025-68696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow thi...

8.8CVSS5.7AI score0.00302EPSS
SaveExploits1References3
NVD
NVD
•added 2025/12/23 11:15 p.m.•19 views

CVE-2025-68696

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd...

8.8CVSS0.00302EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/23 11:15 p.m.•12 views

DEBIAN-CVE-2025-68696

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd...

8.2CVSS5.7AI score0.00302EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/23 11:15 p.m.•14 views

UBUNTU-CVE-2025-68696

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd...

8.8CVSS5.7AI score0.00302EPSS
SaveExploits1References4
OSV
OSV
•added 2025/12/23 10:59 p.m.•14 views

CVE-2025-68696 httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd...

8.8CVSS6.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/12/23 10:59 p.m.•11 views

CVE-2025-68696 httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd...

8.8CVSS5.7AI score0.00302EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2025/12/23 10:59 p.m.•17 views

CVE-2025-68696

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd...

8.8CVSS5.7AI score0.00302EPSS
SaveExploits1
CVE
CVE
•added 2025/12/23 10:59 p.m.•66 views

CVE-2025-68696

CVE-2025-68696 affects the httparty gem (versions ≤ 0.23.2). The vulnerability is SSRF that can lead to leakage of API keys and allow third parties to issue requests to internal servers. Details across connected sources confirm the affected component (httparty), the root cause (SSRF in SSRF-prone...

8.8CVSS5.7AI score0.00302EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/12/23 10:59 p.m.•49 views

CVE-2025-68696 httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd...

8.8CVSS0.00302EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/23 7:31 p.m.•21 views

GHSA-HM5P-X4RQ-38W4 httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

Summary There may be an SSRF vulnerability in httparty. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. Details When httparty receives a path argument that is an absolute URL, it ignores the baseuri field. As a result, if ...

8.8CVSS6.1AI score0.00302EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/23 7:31 p.m.•10 views

EUVD-2025-204848

httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/23 12:00 a.m.•11 views

PT-2025-52864

Name of the Vulnerable Software and Affected Versions httparty versions prior to 0.23.2 Description httparty is susceptible to a Server-Side Request Forgery SSRF condition in versions 0.23.2 and earlier. This issue could lead to the disclosure of API keys and enable unauthorized requests to...

8.8CVSS5.8AI score0.00302EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/23 12:00 a.m.•3 views

CVE-2025-68696: Server-Side Request Forgery (SSRF)

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd...

8.8CVSS5.7AI score0.00302EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/23 12:00 a.m.•1 views

PT-2025-54707

Summary There may be an SSRF vulnerability in httparty. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. Details When httparty receives a path argument that is an absolute URL, it ignores the base uri field. As a result, if...

8.8CVSS6.1AI score0.00302EPSS
SaveExploits1References6
RubySec
RubySec
•added 2025/12/23 12:00 a.m.•25 views

httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

Summary There may be an SSRF vulnerability in httparty. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. Details When httparty receives a path argument that is an absolute URL, it ignores the baseuri field. As a result, if ...

8.8CVSS6.1AI score0.00302EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder