sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS or Windows. You have access to a remote network via ssh. You don't necessarily have admin access on th...

sshuttle

sshuttle: wo transparenter Proxy auf VPN auf ssh trifft Soweit ich weiß, ist sshuttle das einzige Programm, das den folgenden häufigen Anwendungsfall löst: Dein Client-Rechner oder Router läuft unter Linux, FreeBSD, MacOS oder Windows. Du hast über ssh Zugriff auf ein entferntes Netzwerk. Du hast...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Descrizione CVE-2024-47066 : Lobe Chat è un framework di chat di intelligenza artificiale open-source. Prima della versione 1.19.13, la protezione contro la server-side request forgery implementata in src/app/api/proxy/route.ts non considera i...

PXEThief

PXEThief PXEThief è un insieme di strumenti che implementa i percorsi di attacco discussi al DEF CON 30 nel talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 contro la funzionalità di distribuzione del sistema operativo in Microsoft Endpoint Configuration...

slipstream

NAT Slipstreaming NAT Slipstreaming permette a un attaccante di accedere da remoto a qualsiasi servizio TCP/UDP associato a qualsiasi sistema dietro il NAT della vittima, bypassando il NAT/firewall della vittima controllo remoto arbitrario dei fori del firewall, semplicemente visitando un sito we...

BloodHound-Tools

Che cos'è questo? Una raccolta di strumenti che si integrano con BloodHound. Bloodhound è lo standard de facto che sia le squadre di sicurezza blu che rosse usano per trovare percorsi di movimento laterale e escalation dei privilegi che possono potenzialmente essere sfruttati in un ambiente...

CVE-2026-82477

MITRE SAF Heimdall versions 2.11.6 through 2.13.x are affected by a Server-Side Request Forgery (SSRF) vulnerability in the Tenable proxy endpoint , specifically in apps/backend/src/tenable/tenable.controller.ts. A remote, unauthenticated attacker can leverage this flaw to access internal network...

sshuttle

sshuttle: wo transparenter Proxy auf VPN und SSH trifft Soweit ich weiß, ist sshuttle das einzige Programm, das den folgenden häufigen Anwendungsfall löst: Dein Client-Rechner oder Router läuft mit Linux, FreeBSD oder MacOS. Du hast Zugang zu einem entfernten Netzwerk über SSH. Du hast nicht...

CVE-2023-27163

Prova di concetto di SSRF su Request-Baskets CVE-2023-27163 Questo repository contiene una Prova di concetto PoC per CVE-2023-27163, una vulnerabilità di Server-Side Request Forgery SSRF scoperta in request-baskets fino alla versione 1.2.1. Questa vulnerabilità consente agli aggressori di acceder...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server Oracle Fusion Middleware component: WLS Core Components is susceptible to a remote code execution vulnerability. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 2.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability could allow unauthenticated...

Memos 0.13.2 - Server-Side Request Forgery

SSRF vulnerabilities exist in the memos API service /o/get/httpmeta that allow unauthenticated and authenticated users to enumerate and read from the internal network. In addition, one SSRF vulnerability leads to a reflected XSS vulnerability, which may allow an attacker complete control over the...

Gradio - Server-Side Request Forgery

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is used to make an HTTP...

UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...

LocalAI - Partial Local File Read

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery SSRF and partial Local File Inclusion LFI. The endpoint supports both https-// and file-// schemes, where the latter can lead to LFI. However, the output is limited due to the...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

Oracle Business Intelligence Publisher - XML External Entity Injection

Oracle Business Intelligence Publisher is vulnerable to an XML external entity injection attack. The supported versions affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise BI Publishe...

VMware Aria Operations for Logs - Unauthenticated Remote Code Execution

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root. id: CVE-2023-20864 info: name: VMware Aria Operations for Logs - Unauthenticated Remo...

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28481 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...