CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

Exploit_CVE-2023-27163

CVE-2023-27163 PoC Exploit Code Этот Python-скрипт является Proof of Concept PoC для CVE-2023-27163 — уязвимости Server-Side Request Forgery SSRF в Request Basket. Описание кода Скрипт автоматизирует эксплуатацию CVE-2023-27163. Он выполняет следующие действия: 1. Генерирует случайное имя корзины...

CVE-2021-36260

Уязвимость RCE Hikvision CVE-2021-36260 Описание уязвимости Используя эту уязвимость, атакующий может получить полный контроль над устройством с помощью неограниченной root-оболочки, даже если владелец устройства ограничен защищённой оболочкой psh. Помимо взлома IP-камеры, возможен доступ и атака...

CVE-2025-45250

CVE-2025-45250 Description suggérée MrDoc =0.95 est vulnérable à une falsification de requête côté serveur SSRF dans la fonction validateurl du fichier appdoc/utils.py. POC POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie User-Agent: Mozilla/5.0...

CVE-2021-26855-PoC

CVE-2021-26855-PoC Эксплойт PoC для CVE-2021-26855. Оригинальный код разработан https://github.com/GreyOrder. CVE-2021-26855 ssrf простое использование упражнений golang Затронутые версии Exchange Server 2013 меньше CU23 Exchange Server 2016 меньше CU18 Exchange Server 2019 меньше CU7 Условия...

cve-2023-27163

Благодарность @beet1ehttps://github.com/b33t1e из Шанхайского университета Цзяо Тун и @chenlibo147 , @houqinsheng, [email protected] из Шаньдунского университета. Пожалуйста, ознакомьтесь с https://notes.sjtu.edu.cn/s/MUUhEymt7 для получения подробной информации об уязвимости SSRF...

CVE-2022-23779

CVE-2022-23779 CVE-2022-23779 est une vulnérabilité de sécurité dans Zoho ManageEngine Desktop Central Elle est classée comme un problème de divulgation d'informations CWE-200 où le logiciel divulgue des informations internes du serveur à des utilisateurs non autorisés. Les versions antérieures à...

jira-ssrf

jira-ssrf CVE-2017-9506 Сервлет IconUriServlet плагина Atlassian OAuth версий с 1.3.0 до 1.9.12 и с 2.0.0 до 2.0.4 позволяет удаленным злоумышленникам получать доступ к содержимому внутренних сетевых ресурсов и/или выполнять XSS-атаку с помощью подделки серверных запросов SSRF...

CVE-2026-88789

Improper Restriction of XML External Entity Reference in the XSLT support extension camel-quarkus-support-xalan in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document being transformed to read local files or...

CVE-2026-103287

Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal network resources from the Ghost server...

CVE-2026-88789 Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening

Improper Restriction of XML External Entity Reference in the XSLT support extension camel-quarkus-support-xalan in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document being transformed to read local files or...

CVE-2026-88789

The camel-quarkus-support-xalan extension in Apache Camel Quarkus (versions 3.2.0 to 3.33.3 and 3.34.0 to 3.40.0) is vulnerable to CWE-611 due to a forced Xalan TransformerFactory that fails to honor JAXP external access restrictions. An attacker providing an XML document transformed via the xslt...

CVE-2026-103287 Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook

Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal network resources from the Ghost server...

CVE-2026-103287

Ghost versions 1.18.0 before 6.27.0 are vulnerable to a Server-Side Request Forgery (SSRF) in the webhooks feature. This flaw allows users with staff privileges to craft malicious webhook requests, enabling them to probe internal hosts and access internal network resources from the Ghost server. ...

EUVD-2026-90680

Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal network resources from the Ghost server...

CVE-2026-103287 Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook

Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal network resources from the Ghost server...

CVE-2026-76142

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions...

EUVD-2026-90484

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions...

CVE-2026-76142 Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions...