Identificador-CVE-2018-11759

Other language git - pt-BR Check if your instances are expose the CVE 2018-11759 The archive main are a script in bash for exploiting. The urls shall use the protocol and complete addres, example: https://test.site.com.br For more urls in one consult, can be used the here-document, example: Call...

CVE-2026-33626-Lab

CVE-2026-33626 — LMDeploy Vision-Language SSRF Lab Overview This repository reproduces CVE-2026-33626 , a Server-Side Request Forgery SSRF vulnerability in LMDeploy's vision-language image loading path. The vulnerable behavior occurs when LMDeploy receives an image URL and the server-side image...

CVE-2026-116678

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to getpagewithreferer without applying shouldblockhost to the...

CVE-2026-116678 Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to getpagewithreferer without applying shouldblockhost to the...

CVE-2026-116678 Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to getpagewithreferer without applying shouldblockhost to the...

CVE-2026-116678

The Vaultwarden Bitwarden-compatible server (prior to version 1.37.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) flaw in its icon downloader. While the server validates initial host DNS results, it fails to apply the should_block_host() check to second-stage favicon URLs parsed from a...

EUVD-2026-111236

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to getpagewithreferer without applying shouldblockhost to the...

PT-2026-127180

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to get page with referer without applying should block host to the...

CVE-2026-112288

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...

CVE-2026-112288 Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...

CVE-2026-112288 Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...

EUVD-2026-104285

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...

CVE-2026-112288 Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...

CVE-2026-112288

Krayin CRM versions 2.2.5 before 2.2.7 are vulnerable to a Server-Side Request Forgery (SSRF) filter bypass. The flaw resides in the WebhookService::isSafeEndpoint() validation logic, where an attacker can use DNS rebinding to bypass security checks. By returning a public address during validatio...

PT-2026-117432

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...

Krayin Laravel-CRM: Server-side request forgeing vulnerability

In versions prior to 2.2.7 of krayin Laravel-CRM, there was a server-side request forgeing vulnerability. This vulnerability stemmed from an SSRF filter, allowing users with webhook permissions to access internal addresses through DNS rebinding. Attackers could return public addresses during the...

Linux Distros Unpatched Vulnerability : CVE-2026-109378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without...

DEBIAN-CVE-2026-110225

Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing to loopback, private, or cloud metadata...

CVE-2026-110225 Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route

Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing to loopback, private, or cloud metadata...

CVE-2026-110225: Server-Side Request Forgery (SSRF)

Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing to loopback, private, or cloud metadata...