CVE-2023-27163

إثبات المفهوم لـ SSRF على Request-Baskets CVE-2023-27163 يحتوي هذا المستودع على إثبات المفهوم PoC لـ CVE-2023-27163، وهي ثغرة من نوع تزوير الطلب من جانب الخادم SSRF تم اكتشافها في request-baskets حتى الإصدار 1.2.1. تسمح هذه الثغرة للمهاجمين بالوصول إلى موارد الشبكة والمعلومات الحساسة من خلال...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF प्रमाण-अवधारणा ★ विवरण CVE-2024-47066 : Lobe Chat एक ओपन-सोर्स कृत्रिम बुद्धिमत्ता चैट फ्रेमवर्क है। संस्करण 1.19.13 से पहले, src/app/api/proxy/route.ts में लागू सर्वर-साइड रिक्वेस्ट फोर्जरी सुरक्षा रीडायरेक्ट पर विचार नहीं करती है और हमलावर द्वारा एक...

Memos 0.13.2 - Server-Side Request Forgery

SSRF vulnerabilities exist in the memos API service /o/get/httpmeta that allow unauthenticated and authenticated users to enumerate and read from the internal network. In addition, one SSRF vulnerability leads to a reflected XSS vulnerability, which may allow an attacker complete control over the...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

CVE-2026-33752

CVE-2026-33752 CVE-2026-33752إعادة توجيه قائمة على SSRF تؤدي إلى الوصول إلى الشبكة الداخلية في curlcffi ملخص لا يقيد curlcffi الطلبات إلى نطاقات IP الداخلية، ويتبع عمليات إعادة التوجيه تلقائيًا عبر libcurl الأساسي. بسبب هذا، يمكن لعنوان URL يتحكم فيه المهاجم إعادة توجيه الطلبات إلى خدمات داخلية م...

slipstream

NAT Slipstreaming NAT Slipstreaming एक हमलावर को पीड़ित के NAT/फ़ायरवॉल को बायपास करते हुए, पीड़ित के NAT के पीछे किसी भी सिस्टम पर बाउंड किसी भी TCP/UDP सेवा तक दूरस्थ रूप से पहुँचने की अनुमति देता है रिमोट आर्बिट्ररी फ़ायरवॉल पिनहोल कंट्रोल, बस पीड़ित द्वारा किसी वेबसाइट पर विज़िट करने मात्र से...

CVE-2021-36260

Hikvision CVE-2021-36260 RCE भेद्यता भेद्यता विवरण हमलावर इस भेद्यता का उपयोग करके असीमित रूट शेल के साथ डिवाइस पर पूर्ण नियंत्रण प्राप्त कर सकते हैं, भले ही डिवाइस का मालिक सीमित संरक्षित शेल psh तक ही सीमित हो। IP कैमरों में घुसपैठ के अलावा, वे आंतरिक नेटवर्क तक पहुँच और उस पर हमला भी कर सकते...

hikvision-unauthenticated-rce-cve-2021-36260

Hikvision CVE-2021-36260 RCE भेद्यता भेद्यता विवरण हमलावर इस भेद्यता का उपयोग करके असीमित रूट शेल के साथ उपकरण का पूर्ण नियंत्रण ले सकते हैं, भले ही उपकरण का मालिक एक सीमित संरक्षित शेल psh तक सीमित हो। IP कैमरों में सेंध लगाने के अलावा, वे आंतरिक नेटवर्क तक पहुंच सकते हैं और उस पर हमला भी कर सकत...

Review.CVE-2023-5612

CVE-2023-5612 – ثغرة SSRF في GitLab عبر عنوان URL الخاص بـ Webhook إثبات المفهوم والتحليل 📌 نظرة عامة على CVE معرف CVE: CVE-2023-5612 الخطورة: عالية CVSS: 8.1 درجة أساسية النوع: تزوير طلب من جانب الخادم SSRF المكون: Webhooks في GitLab CE/EE الإصدارات المتأثرة: GitLab CE/EE " \ --data-urlencode...

CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

CVE-2026-103958: Server-Side Request Forgery (SSRF)

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

CVE-2026-67105

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2023-54402

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

EUVD-2023-60698

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

CVE-2026-102105: Server-Side Request Forgery (SSRF)

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery SSRF. A server-side request forgery SSRF weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal o...

VulnCheck KEV: CVE-2023-54402

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

CVE-2026-101913

A flaw was found in ip-address. The library fails to validate the complete range of IPv6 link-local addresses during address classification checks. A remote attacker can provide a specially crafted IPv6 address to bypass security controls that rely on this verification. Successful exploitation ca...

PT-2026-99793

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description Improper restriction of XML External Entity XXE references allows a weblog administrator to read files accessible by the Roller process and access internal network addresses. This occurs when importing a...