Project-Deep-Focus

Deep Focus 大規模なIPレンジにわたるサービス検出とフィンガープリンティングのための高性能ネットワーク偵察ツール。セキュリティ研究者やネットワーク管理者向けに設計されています。 目次 1. 概要 2. 機能 3. 要件 4. インストール 5. 使い方 6. 設定 7. エクスポートログの理解 8. ターゲット選択ガイド 9. トラブルシューティング 10. ライセンス 概要 Deep...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

CVE-2019-19781

CVE-2019-19781 一括概念実証用 使用制限 1. 使用前にフォルダ内に"data.txt"ファイルが必要です。内容は192.168.1.0/24\n 192.168.2.0/24\n 2. Linux環境でのみ実行可能です。 python3 CVE-2019-19781-testbata.py 3. 正常に実行され脆弱性が発見された場合、"CVE-2019-19781.txt"に出力されます。...

awsScrape

AWSScrape AWSScrape 是一款工具，用于从所有 AWS IP 范围中抓取 SSL 证书，并在证书的通用名称（CN）、组织（O）和组织单位（OU）字段中搜索特定关键字。 安装 1. 克隆此仓库： root@kitploit: git clone https://github.com/jhaddix/awsscrape.git cd awsscrape 用法 按以下方式运行脚本： root@kitploit: go run awsscrape.go -keyword= Argument| Description ---|--- -keyword| 在 SSL...

EUVD-2026-75184

Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch...

ai-bot-ip-ranges

AI 机器人 IP 范围 收集各大提供商官方发布的 AI 机器人爬虫 IP 地址范围。 概述 本仓库跟踪并汇总 AI 提供商为其网络爬虫发布的 IP 地址范围。这些范围可用于： 验证合法机器人流量 配置防火墙规则 过滤分析数据 选择性拦截机器人 安全监控 最后更新： 2026-05-23T09:16:13.774655Z 统计 指标| 数量 ---|--- 提供商总数| 9 IP 范围总数| 2297 更新频率| 每周（周一 00:00 UTC） 最后检查| 2026-05-23T09:16:13.774655Z 快速开始 下载范围 root@kitploit: All provider...

CVE-2026-87999

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/openwebui/retrieval/web/utils.py treated Python's globally routable address classification as proof th...

CVE-2026-87999 Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/openwebui/retrieval/web/utils.py treated Python's globally routable address classification as proof th...

PT-2026-89176

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/open webui/retrieval/web/utils.py treated Python's globally routable address classification as proof...

CVE-2026-9081

IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery SSRF vulnerability in the validatemodelproviderkey function for the Ollama provider. The function accepts a user-supplied OLLAMABASEURL parameter and passes it directly to requests.get without...

@novu/application-generic: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition

Hi Novu team, Reporting an SSRF blocklist gap in the shared validateUrlSsrf guard. A complete self-contained reproduction is inlined below — copy the four files into a directory and run docker compose up, plus a single-file probe that runs against Node directly. Locally validated against HEAD...

CVE-2026-65056

CVE-2026-65056 describes a server-side request forgery in mcp-webresearch 0.1.7. The vulnerability arises because visit_page validates only URL protocol and does not filter private or reserved IP ranges, enabling an attacker to access internal network services by supplying loopback, link-local, o...

CVE-2026-46415

The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's IP address. Prior to version 0.10.1, Caddy Defender used r.RemoteAddr when evaluating whether a request should be blocked. RemoteAddr is the address of the immediate peer...

CVE-2026-62242 Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration

Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled healthUrl and managementUrl parameters without validation against private IP ranges or metadata endpoints. Attackers can...

PT-2026-56088

Name of the Vulnerable Software and Affected Versions flyto-core affected versions not specified Description An issue exists in the Server-Side Request Forgery SSRF protection mechanism within src/core/utils.py. The is private ip function and validate url ssrf guard only check for native RFC 1918...

foreman: Foreman: Information disclosure via improper validation of nested request parameters

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...

CVE-2026-5138 Foreman: foreman: information disclosure via improper validation of nested request parameters

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...

CVE-2026-54353

Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. The outbound fetch flow validates a hostname against the blacklist before the request is sent, but the actual socket connectio...

CVE-2026-28385 SSRF via image import from URL allows internal network probing by authenticated users

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

CVE-2026-46348

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, the list of disallowed IP address ranges was lacking an IP address range that can be used to reach local IP addresses. An attacker can use an IP address in the affected range to make...