PoC-CVE-2025-52913

CVE-2025-52913 - MiCollab Path Normalization Vulnerability 📌 Overview This repository contains a Proof of Concept PoC for CVE-2025-52913 , a path normalization vulnerability affecting Mitel MiCollab. The issue allows unauthenticated attackers to bypass intended path restrictions by leveraging...

CVE-2026-54761-poc

CVE-2026-54761: Traefik Kubernetes Gateway crossProviderNamespaces Bypass PoC English version 概要 本仓库是一个概念验证（PoC），用于在本地环境中复现 Traefik 的 Kubernetes Gateway provider 中存在的高严重性漏洞 CVE-2026-54761 。 此漏洞影响 crossProviderNamespaces 的许可列表。在声明多个加权后端引用的 HTTPRoute 规则中，Traefik 对许可列表的验证作用于引用目标的...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

LyLme spage v1.9.5 - Server-Side Request Forgery

LyLme spage v1.9.5 is vulnerable to server-side request forgery SSRF via the url parameter in apply/index.php. An attacker can force the server to make arbitrary requests, potentially accessing internal resources. id: CVE-2024-36675 info: name: LyLme spage v1.9.5 - Server-Side Request Forgery...

Apache Tika - XXE Injection

Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE via malicious XFA in PDFs, allowing file read and SSRF attacks. id: CVE-2025-54988 info: name: Apache Tika - XXE Injection author: tx1ee severity: critical description: | Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE vi...

MeterSphere < 2.5.0 SSRF

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Site Scripting. A Server-Side request forgery in...

CVE-2026-78850

Matomo SiteContentDetector Autenticado con SSRF Ciego Reportero Nombre: CYBER-SEC Contacto: [email protected] Resumen Matomo permite que un administrador de sitio autenticado configure el mainurl de un sitio con una dirección interna. Cualquier usuario autenticado con acceso de vista puede...

CVE-2021-21975

CVE-2021-21975 Falsificación de solicitudes del lado del servidor SSRF en la API de VMware vRealize Operations Manager vRealize Operations vROps es una herramienta de gestión autónoma de operaciones de TI impulsada por IA, desde aplicaciones hasta infraestructura, para optimizar, planificar y...

PT-2026-104638

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

CVE-2025-64513

CVE-2025-64513 – PoC de Vulnerabilidad de Omisión de Autenticación en Milvus Proxy 📘 Resumen Este repositorio contiene un script de prueba de concepto PoC para verificar la existencia de CVE-2025-64513 , una vulnerabilidad crítica de omisión de autenticación en Milvus Proxy que puede permitir el...

CVE-2025-29927-Nextjs-Bypass-PoC

PoC: CVE-2025-29927 - Next.js Middleware Bypass This repository contains a Proof of Concept PoC demonstrating how to bypass middleware security checks in Next.js v13.5.6 by exploiting a vulnerability related to internal HTTP headers. Vulnerability Overview: CVE-2025-29927 What is it? CVE-2025-299...

cve-2025-29927

cve-2025-29927 CVE-2025-29927 是 Next.js（一个流行的基于 React 的 Web 框架）中的一个严重漏洞。该缺陷存在于中间件功能处理某些内部标头的方式中——具体来说是 x-middleware-subrequest 标头。...

CVE-2026-105122

OpenAM versions prior to 16.1.3 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The root cause is an unvalidated jwks_uri parameter during the registration or modification of OAuth 2.0 clients. An attacker can leverage this to force the server to fetch internal resources, po...

CVE-2026-105122 OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri

OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwksuri. Attackers can trigger unauthenticated fetches through client-authentication and ID-token...

CVE-2025-29927

CVE-2025-29927 – Omisión de Autorización de Middleware de Next.js Este repositorio contiene un exploit funcional para CVE-2025-29927, una vulnerabilidad crítica de omisión de autorización en Next.js. El fallo permite a los atacantes eludir las comprobaciones de autenticación y autorización basada...

CVE-2026-33267-PoC

CVE-2026-33267 — Apache Traffic Server: cabecera @ no confiable → suplantación de metadatos internos CVSS 10.0 Crítico · CWE-20 · GHSA-jrh6-9hgv-mqm7 Resumen Apache Traffic Server reserva las cabeceras con prefijo @ @Ats-Internal, @ICAP-Status, @TCPInfo, ... para metadatos internos : viven en la...

GitLab CI Lint API - Server-Side Request Forgery

GitLab 10.5 and later contain a server-side request forgery caused by insecure handling of webhook requests, letting unauthenticated attackers exploit the server for arbitrary requests, exploit requires sending crafted webhook requests. id: CVE-2021-22175 info: name: GitLab CI Lint API -...

Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state

Impact Wasmtime's implementation of bulk-data-transfer WebAssembly instructions, such as memory.copy, contains a vulnerability when a preemption via epochs or fuel is combined with altering the store's state or cancelling a computation. To prevent these operations from taking too long Wasmtime...

CVE-2026-82042

UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access by presenting a valid Utm-Internal-Key header matching the INTERNALKEY environment variable value, which the InternalApiKeyFilter accepts for any endpoint...

CVE-2026-82044

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.downloadPdf method exposed via GET /api/generate-pdf-report. Attacke...