Lucene search
+L

17175 matches found

Kitploit
Kitploit
added 2026/08/25 3:08 p.m.75 views

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2026/08/25 2:58 p.m.6 views

CVE-2026-55537 PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validatewebhookurl accepts webhookurl when resolution raises socket.gaierror because the exception path uses except socket.gaierror: pass. JobExecutor.sendwebhook later performs a fresh lookup, allowing DNS chang...

7.1CVSS
SaveExploits0References3
CVE
CVE
added 2026/08/25 2:53 p.m.6 views

CVE-2026-79717

A server-side request forgery SSRF vulnerability was found in galaxyng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions can set a namespace avatar URL to an arbitrary address, including internal networks, loopback, or cloud instance metadata...

6.4CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/25 2:43 p.m.12 views

EUVD-2026-53606

praisonaiagents vulnerable to SSRF in webcrawl tool via redirect-following and DNS rebinding validate-then-fetch gap...

7.5CVSS5.4AI score0.00194EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/25 2:07 p.m.6 views

CVE-2026-55525

PraisonAI (praisonaiagents), a multi-agent teams system, is vulnerable to SSRF via redirect-following in the web_crawl function prior to version 1.6.58 . The root cause is that only the initial URL's resolved IP is validated against a private/loopback blocklist, while the underlying httpx.Client(...

7.5CVSS5.4AI score
SaveExploits0References3
EUVD
EUVD
added 2026/08/25 11:33 a.m.3 views

EUVD-2026-65455

Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata...

8.3CVSS5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 11:13 a.m.29 views

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/08/25 8:48 a.m.3 views

CVE-2026-10582

A flaw was found in Hugo. The security.http.urls allowlist, which controls outbound fetches, does not adequately validate the destination address of URLs. This vulnerability allows a remote attacker to supply a specially crafted URL that resolves to internal network resources. As a result, the Hu...

8.3CVSS5.3AI score
SaveExploits0References7
NVD
NVD
added 2026/08/25 8:18 a.m.6 views

CVE-2026-67578

FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...

8.7CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/25 7:43 a.m.4 views

EUVD-2026-65319

FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...

9.1CVSS5.2AI score
SaveExploits0References3
CVE
CVE
added 2026/08/25 7:43 a.m.13 views

CVE-2026-59769

Furuno FA-50 (all versions) contains hard-coded credentials that, if known to an attacker with access to the vessel's internal network, allow operation of the settings screen to alter the identification number . The vulnerability is rated CVSS 3.1: 9.1 (CRITICAL) and CVSS 4.0: 8.8 (HIGH) , reflec...

9.1CVSS5.4AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/25 7:42 a.m.6 views

CVE-2026-67578

FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...

8.7CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/25 7:42 a.m.4 views

EUVD-2026-65318

FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...

8.7CVSS5.2AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 6:40 a.m.130 views

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

7.1AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.24 views

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

8.8CVSS5.9AI score0.3436EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.261 views

Mlflow <2.9.2 - Path Traversal

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. id: CVE-2023-6909 info: name: Mlflow 2.9.2 - Path Traversal author: Hyunsoo-ds severity: high description: | Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. impact: | Successful...

7.5CVSS7.6AI score0.89716EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.64 views

EspoCRM <= 9.3.3 - Server-Side Request Forgery

EspoCRM = 9.3.3 contains an authenticated server-side request forgery caused by improper internal-host validation using alternative IPv4 formats in HostCheck::isNotInternalHost, letting authenticated users access internal resources via /api/v1/Attachment/fromImageUrl endpoint. id: CVE-2026-33534...

4.3CVSS5.1AI score0.01978EPSS
SaveExploits5References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.5 views

Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure

Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate. The endpoint /ccm/system/dialogs/file/usage/fID accepts an integer file ID in the URL and returns internal site structure data page IDs, versions, URL paths to anyone who sends a GET request. id:...

6.3CVSS5.3AI score0.00202EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.22 views

LyLme spage v1.9.5 - Server-Side Request Forgery

LyLme spage v1.9.5 is vulnerable to server-side request forgery SSRF via the url parameter in apply/index.php. An attacker can force the server to make arbitrary requests, potentially accessing internal resources. id: CVE-2024-36675 info: name: LyLme spage v1.9.5 - Server-Side Request Forgery...

9.1CVSS5.6AI score0.01438EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.37 views

Memos 0.13.2 - Server-Side Request Forgery

SSRF vulnerabilities exist in the memos API service /o/get/httpmeta that allow unauthenticated and authenticated users to enumerate and read from the internal network. In addition, one SSRF vulnerability leads to a reflected XSS vulnerability, which may allow an attacker complete control over the...

5.8CVSS5.8AI score0.01049EPSS
SaveExploits1References2
Rows per page
Query Builder