Jira-Scan

Jira-Scan SOLO PROBADO CON PYTHON 3 Proporciona una lista de sitios web para probar sin el http o https y esto probará cada uno para la vulnerabilidad SSRF. Usa una VPS de DO CVE-2017-9506 El IconUriServlet del Atlassian OAuth Plugin desde la versión 1.3.0 hasta la versión 1.9.12 y desde la versi...

CVE-2023-27163-POC

CVE-2023-27163 CVE-2023-27163 Request-baskets hasta v1.2.1 se descubrió que contiene una vulnerabilidad de Server-Side Request Forgery SSRF a través del componente /api/baskets/name. Esta vulnerabilidad permite a los atacantes acceder a recursos de red e información sensible a través de una...

CVE-2017-9506

Prueba de concepto SSRF y XSS https://jira.you.com//plugins/servlet/oauth/users/icon-uri?consumerUri=http://www.google.co.uk CVE-2017-9506 El IconUriServlet del Atlassian OAuth Plugin desde la versión 1.3.0 anterior a la versión 1.9.12 y desde la versión 2.0.0 anterior a la versión 2.0.4 permite ...

jira-ssrf

jira-ssrf CVE-2017-9506 El IconUriServlet del Atlassian OAuth Plugin desde la versión 1.3.0 anterior a la versión 1.9.12 y desde la versión 2.0.0 anterior a la versión 2.0.4 permite a atacantes remotos acceder al contenido de recursos internos de la red y/o realizar un ataque XSS a través de Serv...

CVE-2026-44578

🚨 CVE-2026-44578 — Next.js SSRF 漏洞 📌 概述 CVE-2026-44578 是一个影响自托管 Next.js 应用的高严重性 服务端请求伪造 SSRF 漏洞。 攻击者可以利用精心构造的 WebSocket 升级请求 ，强制服务器向内部或外部系统发起出站请求。 ⚠️ 影响 此漏洞可能允许攻击者访问： 目标| 风险 ---|--- 🔐 内部 API| 未授权的内部访问 ☁️ 云元数据端点| 凭证泄露 🖥 管理接口| 权限提升 🌐 网络资源| 内部侦察 🧠 攻击流程 Attacker │ ▼ Crafted WebSocket Upgrade Request │...

CVE-2026-88403

A Server-Side Request Forgery SSRF in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request...

CVE-2026-88403

A Server-Side Request Forgery SSRF in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request...

CVE-2026-88403: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request...

CVE-2026-90984 Generate PDF using Contact Form 7 < 4.2.2 - Unauthenticated Server-Side Request Forgery via Array-Valued Form Field

The Generate PDF using Contact Form 7 WordPress plugin before 4.2.2 does not restrict the destination of the image fetch its PDF renderer performs on submitted form content, allowing unauthenticated users to make the server request internal resources and read the response back through the generat...

EUVD-2026-78921

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, the weburlread URL policy in src/url-reader.ts can be bypassed while MCPHTTPHARDEN is enabled and MCPHTTPALLOWPRIVATEURLS is not enabled because redirec...

CVE-2026-91938 Flowise before 3.1.4 Server-Side Request Forgery via document loaders

Flowise versions before 3.1.4 contain a server-side request forgery vulnerability in Cheerio, Playwright, and Puppeteer document loader nodes that bypass SSRF protection. Attackers can provide arbitrary URLs to fetch cloud metadata, internal services, and private network resources with response...

CVE-2026-79425

An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/onlineupload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...

PT-2026-92031

An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/online upload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...

CVE-2026-79425: Server-Side Request Forgery (SSRF)

An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/onlineupload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...

CVE-2026-79425

An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/onlineupload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...

PYSEC-2026-3898 praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Summary webcrawl an exported, model-callable tool validates only the INITIAL URL's resolved IP against a private/loopback blocklist, then fetches with httpx.Clientfollowredirects=True and never re-validates redirect targets. An attacker who controls the agent's crawl target a malicious task, or...

PT-2026-89650

Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, POST /api/files/url, is vulnerable to Server-Side Request Forgery SSRF. The HTTP downloader used by this endpoint fetches user-supplied URLs with redirects...

EUVD-2026-65228

NLTK: pathsec SSRF protection can be bypassed when a proxy is configured...

SUSE CVE-2026-78682

NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen and callers nltk.data.load, nltk.downloader.Downloader.index/download when an HTTP proxy is configured. pathsec.urlopen validates the requested hostname locally, but proxy-handler inheritance disables...

CVE-2026-85699

jina-ai reader is affected by a server-side request forgery (SSRF) vulnerability. URL validation is applied only to the initial request but is not re-applied to subsequent redirect hops . An attacker can craft a public URL that redirects to internal network addresses or cloud metadata endpoints, ...