CVE-2026-37197

CVE-2026-37197 - NukeViet CMS v4.5.07 におけるサーバーサイドリクエストフォージェリ SSRF 概要 VINADES JSC NukeViet CMS v4.5.07 の管理者リモートアップロード機能 に、サーバーサイドリクエストフォージェリ SSRF の脆弱性が存在します。この問題により、認証された管理者がファイルアップロード時に細工されたリモートファイルURLを指定することで、サーバー側から任意のURLへのHTTPリクエストを発生させることができます。...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

EUVD-2026-90876

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

Exploit_CVE-2023-27163

CVE-2023-27163 PoC エクスプロイトコード この Python スクリプトは、Request Basket の Server-Side Request Forgery SSRF 脆弱性 CVE-2023-27163 に対する Proof of Concept PoC です。 コードの説明 このスクリプトは CVE-2023-27163 のエクスプロイトを自動化します。以下のアクションを実行します： 1. ランダムなバスケット名を生成 : インタラクションのためのユニークなエンドポイントを作成します。 2. バスケットを作成し、APIトークンを取得 : Request...

CVE-2021-36260

Hikvision CVE-2021-36260 RCE 脆弱性 脆弱性の説明 攻撃者は本脆弱性を利用することで、無制限のrootシェルによりデバイスを完全に制御できます。デバイスの所有者が限定的な保護シェル（psh）しか持てない場合でも同様です。IPカメラへの侵入に加えて、内部ネットワークへのアクセスや攻撃も可能です。 FOFA header="Hikvision" app="HIKVISION-视频监控" 使用方法 python ./CVE-2021-36260.py -u http://192.168.1.1:8080 --check python...

cve-2023-27163

上海交通大学の@beet1ehttps://github.com/b33t1e と山東大学の@chenlibo147、@houqinsheng、[email protected] に感謝します。 SSRF脆弱性 CVE-2023-27163 の詳細については、https://notes.sjtu.edu.cn/s/MUUhEymt7 をご確認ください。 このコードは、request-baskets の SSRF を使用して内部サーバーを列挙するためのものです。 何か間違っている点や調整が必要な点があれば、お気軽に [email protected] までお知らせくださ...

CVE-2026-88789

Improper Restriction of XML External Entity Reference in the XSLT support extension camel-quarkus-support-xalan in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document being transformed to read local files or...

CVE-2026-88789 Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening

Improper Restriction of XML External Entity Reference in the XSLT support extension camel-quarkus-support-xalan in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document being transformed to read local files or...

CVE-2026-88789

The camel-quarkus-support-xalan extension in Apache Camel Quarkus (versions 3.2.0 to 3.33.3 and 3.34.0 to 3.40.0) is vulnerable to CWE-611 due to a forced Xalan TransformerFactory that fails to honor JAXP external access restrictions. An attacker providing an XML document transformed via the xslt...

CVE-2026-102145

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. On its own this did not result in code execution...

CVE-2026-102138

An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient validation of its scheme or destination, causing the server to issue requests to internal network services. Exploitation...

CVE-2026-102105

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery SSRF. A server-side request forgery SSRF weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal o...

CVE-2023-54402

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

CVE-2026-102105 Kiteworks Email Protection Gateway server-side request forgery

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery SSRF. A server-side request forgery SSRF weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal o...

EUVD-2023-60698

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

CVE-2026-102103 Kiteworks Email Protection Gateway server-side request forgery

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery SSRF. A server-side request forgery SSRF weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal o...

CVE-2026-102138 Kiteworks Core Server-Side Request Forgery (SSRF)

An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient validation of its scheme or destination, causing the server to issue requests to internal network services. Exploitation...

CVE-2026-102145 Kiteworks Core Server-Side Request Forgery through CRLF Injection

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. On its own this did not result in code execution...

CVE-2026-103243 LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...