BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

Memos 0.13.2 - Server-Side Request Forgery

SSRF vulnerabilities exist in the memos API service /o/get/httpmeta that allow unauthenticated and authenticated users to enumerate and read from the internal network. In addition, one SSRF vulnerability leads to a reflected XSS vulnerability, which may allow an attacker complete control over the...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ 설명 CVE-2024-47066 : Lobe Chat은 오픈소스 인공지능 채팅 프레임워크입니다. 1.19.13 이전 버전에서는 src/app/api/proxy/route.ts에 구현된 서버 측 요청 위조SSRF 보호 기능이 리다이렉트를 고려하지 않아, 공격자가 프라이빗 네트워크나 루프백 주소와 같은 내부 리소스로 리다이렉트되는 외부 악성 URL을 제공하면 우회될 수 있습니다. 1.19.13 버전에는 이 문제에 대한 개선된 수정이 포함되...

slipstream

NAT 슬립스트리밍 NAT 슬립스트리밍은 공격자가 피해자의 NAT/방화벽을 우회하여원격 임의 방화벽 포트 개방 제어 모든 시스템 에 바인딩된 모든 TCP/UDP 서비스에 원격으로 접근할 수 있도록 합니다. 피해자는 단지 웹사이트를 방문하기만 하면 됩니다. v1 개발자 : @SamyKamkar // https://samy.pl v2 개발자 : Samy Kamkar && Ben Seri && Gregory Vishnipolsky of Armis. 여기에서 Ben& Gregory의 v2에 대한 훌륭한 기술 문서를 읽어보세요 이 문서...

CVE-2023-27163

Request-Baskets의 SSRF 개념 증명 CVE-2023-27163 이 저장소는 request-baskets 버전 1.2.1까지에서 발견된 서버 측 요청 위조SSRF 취약점인 CVE-2023-27163에 대한 개념 증명PoC을 포함합니다. 이 취약점은 조작된 API 요청을 통해 /api/baskets/name 구성 요소를 악용하여 공격자가 네트워크 리소스와 민감한 정보에 접근할 수 있게 합니다. 사용법 git clone https://github.com/MasterCode112/CVE-2023-27163.git bas...

CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

CVE-2026-33752

CVE-2026-33752 CVE-2026-33752（curlcffi におけるリダイレクトベースの SSRF による内部ネットワークアクセス） 概要 curlcffi は内部 IP レンジへのリクエストを制限しておらず、基盤となる libcurl を介してリダイレクトを自動的に追跡します。 このため、攻撃者が制御する URL が、クラウドメタデータエンドポイントなどの内部サービスへのリクエストをリダイレクトできる可能性があります。さらに、curlcffi の TLS...

CVE-2026-67105

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2021-36260

Hikvision CVE-2021-36260 RCE 취약점 취약점 설명 공격자는 이 취약점을 이용해 무제한 root shell로 장치를 완전히 제어할 수 있으며, 장치 소유자가 제한된 보호 셸psh로 제한되어 있어도 마찬가지입니다. IP 카메라를 침입하는 것 외에도 내부 네트워크에 접근하고 공격할 수 있습니다. FOFA header="Hikvision" app="HIKVISION-视频监控" 사용 방법 python ./CVE-2021-36260.py -u http://192.168.1.1:8080 --check python...

CVE-2023-54402

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

EUVD-2023-60698

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

VulnCheck KEV: CVE-2023-54402

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

CVE-2026-101913

A flaw was found in ip-address. The library fails to validate the complete range of IPv6 link-local addresses during address classification checks. A remote attacker can provide a specially crafted IPv6 address to bypass security controls that rely on this verification. Successful exploitation ca...

hikvision-unauthenticated-rce-cve-2021-36260

Hikvision CVE-2021-36260 RCE 취약점 취약점 설명 공격자는 이 취약점을 이용하여 제한된 보호 셸psh에 얽매인 장치 소유자와 관계없이 무제한 루트 셸로 장치를 완전히 제어할 수 있습니다. IP 카메라 침입 외에도 내부 네트워크에 접근하여 공격할 수 있습니다. FOFA header="Hikvision" app="HIKVISION-视频监控" 사용 방법 python ./CVE-2021-36260.py -u http://192.168.1.1:8080 --check python ./CVE-2021-36260.py ...

basketcraft

basketcraft este es un script que explota la vulnerabilidad CVE-2023-27163, que es un SSRF en request-baskets versión 1.2.1 SSRF en Request-Baskets CVE-2023–27163 CVE-2023–27163 representa una vulnerabilidad crítica de falsificación de solicitudes del lado del servidor Server-Side Request Forgery...

Review.CVE-2023-5612

CVE-2023-5612 – GitLab SSRF via Webhook URL PoC 및 분석 📌 CVE 개요 CVE-ID: CVE-2023-5612 심각도: 높음 CVSS: 8.1 기본 점수 유형: 서버 측 요청 위조 SSRF 구성 요소: GitLab CE/EE 웹훅 영향받는 버전: GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888" \ http://:8080/api/v4/projects//hooks 🧱 환경 및 설정 - 테스트용으로 특별히 배포된 가상 머신 내의...

CVE-2026-100681

Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts forged Bot Framework activities with arbitrary serviceUrl values. Attackers can submit a crafted POST request to inject an...

CVE-2026-100601

ClawHub openclaw/clawhub application/backend contains a server-side request forgery vulnerability in the public profile preview's image fetching. The preview accepts a user-supplied image URL and checks the textual hostname against private-address patterns, but does not validate or pin the resolv...