CVE-2023-27163-POC

CVE-2023-27163 CVE-2023-27163 Request-baskets バージョン1.2.1以前には、コンポーネント /api/baskets/name を介したサーバーサイドリクエストフォージェリ（SSRF）が含まれていることが判明しました。この脆弱性により、攻撃者は巧妙に細工されたAPIリクエストを通じてネットワークリソースや機密情報にアクセスできます。このPoCはSSRFを利用してRCEを実行します。 このPythonスクリプトは、Request Baskets...

Jira-Scan

Jira-Scan Python 3에서만 테스트됨 http 또는 https를 제외한 웹사이트 목록을 제공하면 각 사이트에 대해 SSRF 취약점을 테스트합니다. DO에서 VPS를 사용하세요 CVE-2017-9506 Atlassian OAuth Plugin의 IconUriServlet은 버전 1.3.0부터 1.9.12 미만, 버전 2.0.0부터 2.0.4 미만에서 원격 공격자가 서버 측 요청 위조SSRF를 통해 내부 네트워크 리소스의 콘텐츠에 접근하거나 XSS 공격을 수행할 수 있도록 합니다. Atlassian Jira에 따르면 다...

CVE-2017-9506

概念実証 SSRF & XSS root@kitploit: https://jira.you.com//plugins/servlet/oauth/users/icon-uri?consumerUri=http://www.google.co.uk CVE-2017-9506 Atlassian OAuth Plugin の IconUriServlet は、バージョン 1.3.0 から 1.9.12 未満、およびバージョン 2.0.0 から 2.0.4 未満において、リモートの攻撃者が内部ネットワークリソースのコンテンツにアクセスしたり、Server Side Request...

jira-ssrf

jira-ssrf CVE-2017-9506 Atlassian OAuth Plugin의 IconUriServlet 버전 1.3.0 이상 1.9.12 미만 및 버전 2.0.0 이상 2.0.4 미만은 원격 공격자가 서버 측 요청 위조SSRF를 통해 내부 네트워크 리소스의 콘텐츠에 접근하거나 XSS 공격을 수행할 수 있게 합니다...

EUVD-2026-65228

NLTK: pathsec SSRF protection can be bypassed when a proxy is configured...

CVE-2026-44578

🚨 CVE-2026-44578 — Уязвимость SSRF в Next.js 📌 Обзор CVE-2026-44578 — это уязвимость подделки серверных запросов SSRF высокой степени серьезности , затрагивающая Next.js приложения, размещенные самостоятельно. Злоумышленники могут использовать специально созданные запросы на обновление WebSocket ...

CVE-2026-85699

jina-ai reader is affected by a server-side request forgery (SSRF) vulnerability. URL validation is applied only to the initial request but is not re-applied to subsequent redirect hops . An attacker can craft a public URL that redirects to internal network addresses or cloud metadata endpoints, ...

CVE-2026-85675

OWL 's DocumentProcessingToolkit contains a server-side request forgery (SSRF) vulnerability in the extract_document_content tool. The tool fetches caller-supplied URLs without scheme, host, or IP filtering , allowing attackers to inject malicious URLs via prompt injection and cause the server to...

CVE-2026-84697

Mailpit (open-source mail testing tool) contains a Server-Side Request Forgery (SSRF) vulnerability in its IsInternalIP deny list function (file: internal/tools/net.go). The deny list fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix , all...

CVE-2026-78682

NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen and callers nltk.data.load, nltk.downloader.Downloader.index/download when an HTTP proxy is configured. pathsec.urlopen validates the requested hostname locally, but proxy-handler inheritance disables...

CVE-2026-78682 NLTK before 3.10.3 SSRF Protection Bypass via Proxy

NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen and callers nltk.data.load, nltk.downloader.Downloader.index/download when an HTTP proxy is configured. pathsec.urlopen validates the requested hostname locally, but proxy-handler inheritance disables...

CVE-2026-78682

NLTK before 3.10.3 is affected by a server-side request forgery (SSRF) vulnerability in nltk.pathsec.urlopen and its callers (nltk.data.load, nltk.downloader.Downloader.index/download). The root cause is that when an HTTP proxy is configured, proxy-handler inheritance disables the safe HTTP/HTTPS...

Linux Distros Unpatched Vulnerability : CVE-2026-78682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen and callers nltk.data.load,...

Open Redirect

Overview unstructured is an A library that prepares raw documents for downstream ML tasks. Affected versions of this package are vulnerable to Open Redirect via the url argument in the partition, partitionhtml, and partitionmd functions. An attacker can access internal network resources or...

CVE-2026-61704

In the npm package link-preview-js , the resolveDNSHost function in index.ts validates only one resolved IP address but then fetches using the original hostname, enabling DNS rebinding that bypasses SSRF protections and lets server-side preview fetches reach internal HTTP resources. Redirect hand...

PT-2026-81157

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description A server-side request forgery SSRF occurs when an HTTP proxy is configured. The nltk.pathsec.urlopen function and its callers nltk.data.load and nltk.downloader.Downloader.index/download validates the...

CVE-2026-71270

Stirling-PDF's POST /api/v1/convert/url/pdf endpoint ConvertWebsiteToPDF.java was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints html/pdf, file/pdf, markdown/pdf...

EUVD-2026-53355

Stirling-PDF's POST /api/v1/convert/url/pdf endpoint ConvertWebsiteToPDF.java was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints html/pdf, file/pdf, markdown/pdf. The endpoint validates only that the initial...

GHSA-H6X2-583H-X99R Open WebUI: DNS Rebinding SSRF Bypass

Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-local addresses, then let the HTTP client resolve that hostname again at connect time. An attacker who controls the authoritative DNS for a hostname they submit can answer with a...

Server-side Request Forgery (SSRF)

Overview ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through improper handling of IPv4 addresses with leading zeros in the Address4. An attacker can bypass network...