CVE-2023-27163-POC

CVE-2023-27163 CVE-2023-27163 被发现在 Request-baskets 1.2.1 及之前版本中存在服务器端请求伪造（SSRF）漏洞，该漏洞通过 /api/baskets/name 组件触发。攻击者可利用精心构造的 API 请求访问网络资源和敏感信息。本 PoC 利用该 SSRF 漏洞实现远程代码执行（RCE）。 此 Python 脚本利用 Request Baskets 1.2.1 及之前版本中的服务器端请求伪造（SSRF）漏洞（CVE-2023-27163）。该漏洞允许攻击者通过 /api/baskets/name 端点创建一个篮子，并将其配置为将 HT...

Jira-Scan

Jira-Scan TESTÉ UNIQUEMENT AVEC PYTHON 3 Fournissez une liste de sites web à tester sans le http ou https et cela testera chacun d'eux pour la vulnérabilité SSRF. Utilisez un VPS de DO CVE-2017-9506 L'IconUriServlet du plugin Atlassian OAuth de la version 1.3.0 avant la version 1.9.12 et de la...

jira-ssrf

jira-ssrf CVE-2017-9506 Le IconUriServlet du plugin Atlassian OAuth, des versions 1.3.0 à 1.9.12 exclue et des versions 2.0.0 à 2.0.4 exclue, permet à des attaquants distants d'accéder au contenu de ressources réseau internes et/ou d'effectuer une attaque XSS via une Server Side Request Forgery...

CVE-2026-44578

🚨 CVE-2026-44578 — Vulnerabilidade SSRF no Next.js 📌 Visão Geral CVE-2026-44578 é uma vulnerabilidade de alta gravidade do tipo Server-Side Request Forgery SSRF que afeta aplicações Next.js auto-hospedadas. Atacantes podem explorar solicitações de upgrade WebSocket maliciosas para forçar o servid...

CVE-2017-9506

Proof of Concept SSRF & XSS root@kitploit: https://jira.you.com//plugins/servlet/oauth/users/icon-uri?consumerUri=http://www.google.co.uk CVE-2017-9506 Il servlet IconUriServlet del plugin OAuth di Atlassian dalla versione 1.3.0 precedente alla 1.9.12 e dalla versione 2.0.0 precedente alla 2.0.4...

Open Redirect

Overview unstructured is an A library that prepares raw documents for downstream ML tasks. Affected versions of this package are vulnerable to Open Redirect via the url argument in the partition, partitionhtml, and partitionmd functions. An attacker can access internal network resources or...

CVE-2026-61704

In the npm package link-preview-js , the resolveDNSHost function in index.ts validates only one resolved IP address but then fetches using the original hostname, enabling DNS rebinding that bypasses SSRF protections and lets server-side preview fetches reach internal HTTP resources. Redirect hand...

CVE-2026-71270

Stirling-PDF's POST /api/v1/convert/url/pdf endpoint ConvertWebsiteToPDF.java was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints html/pdf, file/pdf, markdown/pdf...

EUVD-2026-53355

Stirling-PDF's POST /api/v1/convert/url/pdf endpoint ConvertWebsiteToPDF.java was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints html/pdf, file/pdf, markdown/pdf. The endpoint validates only that the initial...

GHSA-H6X2-583H-X99R Open WebUI: DNS Rebinding SSRF Bypass

Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-local addresses, then let the HTTP client resolve that hostname again at connect time. An attacker who controls the authoritative DNS for a hostname they submit can answer with a...

Server-side Request Forgery (SSRF)

Overview ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through improper handling of IPv4 addresses with leading zeros in the Address4. An attacker can bypass network...

Server-side Request Forgery (SSRF)

Overview @n8n/n8n-nodes-langchain is a Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the MCP Client. An attacker can access internal or otherwise restricted network resources by supplying crafted endpoints, causing the server to connect to unintended host...

CVE-2026-65318

Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled URLs through the WebSocket import endpoint. Attackers can...

Server-side Request Forgery (SSRF)

Overview phanan/koel is a personal audio streaming service. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the createPodcastChannel.view process. An attacker can cause the server to initiate HTTP requests to internal or private network resources by...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the server process. An attacker can access internal network resources and exfiltrate sensitive data by creating virtual tables that trigger outbound HTTP requests to internal or cloud metadata...

CVE-2026-60105 Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass

Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP function, which fails to detect embedded IPv4 addresses within IPv4-mapped IPv6 addresses. An unauthenticated attacker can obta...

PYSEC-2026-2011 vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class

Summary A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows...

PYSEC-2026-1396 FastChat Server-Side Request Forgery vulnerability

A Server-Side Request Forgery SSRF vulnerability was identified in the lm-sys/fastchat web server, specifically in the affected version git 2c68a13. This vulnerability allows an attacker to access internal server resources and data that are otherwise inaccessible, such as AWS metadata credentials...

CVE-2026-10564 SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery SSRF. The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker c...

CVE-2026-10564 SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery SSRF. The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker c...