CVE-2023-27163

Proof Of Concept of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and...

hikvision-unauthenticated-rce-cve-2021-36260

Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description An attacker can use this vulnerability to gain complete control of the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras, they...

CVE-2021-36260

Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description Attackers can exploit this vulnerability to gain complete control over the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras,...

CVE-2026-33752

CVE-2026-33752 CVE-2026-33752Redirect-based SSRF leading to internal network access in curlcffi Summary curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Description CVE-2024-47066 : Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in src/app/api/proxy/route.ts does not consider redirect and could be...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

Memos 0.13.2 - Server-Side Request Forgery

SSRF vulnerabilities exist in the memos API service /o/get/httpmeta that allow unauthenticated and authenticated users to enumerate and read from the internal network. In addition, one SSRF vulnerability leads to a reflected XSS vulnerability, which may allow an attacker complete control over the...

CVE-2026-87953

Server-Side Request Forgery SSRF vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-112991 MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()

The htmltomarkdown expansion module in MISP Modules contains a server-side request forgery SSRF vulnerability in its issafeurl URL validation function. The BLOCKEDRANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the...

CVE-2026-112991

The MISP html_to_markdown expansion module is vulnerable to Server-Side Request Forgery (SSRF) due to incomplete IP range blocking in the is_safe_url() validation function. The BLOCKED_RANGES list fails to exclude critical ranges, including 0.0.0.0/8 , 100.64.0.0/10 , ::/128 , fc00::/7 , and fe80...

CVE-2026-112991 MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()

The htmltomarkdown expansion module in MISP Modules contains a server-side request forgery SSRF vulnerability in its issafeurl URL validation function. The BLOCKEDRANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the...

CVE-2026-57143 PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxngsearch and the searchweb SearxNG provider pass the LLM-controlled searxngurl parameter directly to requests.get without validating its scheme, host, port, or resolved address. Prompt-injected content can direct the...

slipstream

NAT Slipstreaming NAT Slipstreaming permite a un atacante acceder remotamente a cualquier servicio TCP/UDP vinculado a cualquier sistema detrás del NAT de la víctima, evitando el NAT/cortafuegos de la víctima control remoto arbitrario de agujeros en el cortafuegos, simplemente con que la víctima...

Review.CVE-2023-5612

CVE-2023-5612 – SSRF di GitLab tramite URL Webhook PoC e Analisi 📌 Panoramica CVE ID CVE: CVE-2023-5612 Gravità: Alta CVSS: 8.1 Punteggio Base Tipo: Server-Side Request Forgery SSRF Componente: Webhook di GitLab CE/EE Versioni Affette: GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888"...

CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

CVE-2026-103958: Server-Side Request Forgery (SSRF)

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

CVE-2026-67105

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2023-54402

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...