ActiveReign

ActiveReign ⚠️ Merci pour votre soutien. Ce projet n'est plus maintenu publiquement. Contexte Il y a quelque temps, on m'a mis au défi d'écrire un outil de découverte avec Python3 qui pourrait automatiser le processus de recherche d'informations sensibles sur les partages de fichiers réseau. Après...

nimux

Инструментарий для сетевого перечисления и удалённого выполнения на чистом Nim nimux - Нативный инструментарий оператора nimux — это нативная командная оболочка для авторизованных проверок безопасности. Она объединяет сетевое перечисление, облегчённое веб-обнаружение, проверку учётных данных,...

Praeda

Этот файл используется для перечисления некоторых элементов конфигурации и рекомендаций. Также здесь приведён базовый синтаксис Praeda. Требуемые Perl-модули: LWP::Simple LWP::UserAgent HTML::TagParser URI::Fetch HTTP::Cookies IO::Socket HTML::TableExtract Getopt::Std Net::SSL Net::SNMP...

BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery

Unauthenticated Server-Side Request Forgery SSRF vulnerability exists in the BrightSign digital signage media player affecting the Diagnostic Web Server DWS. The application parses user supplied data in the 'url' GET parameter to construct a diagnostics request to the Download Speed Test service...

GoEnumerator

À PROPOS DE GoEnumerator GoEnumerator est un outil que j'écris pour le plaisir, mais aussi pour l'utiliser pour ma propre énumération, donc je vais continuer à ajouter des fonctionnalités pour essayer d'accélérer les premières étapes lors de toute énumération CTF ou test de pénétration...

enyx

enyx Инструмент перечисления SNMP IPV6 - n3rdh4x0r -...

CVE-2026-37197

CVE-2026-37197 - Подделка запросов на стороне сервера SSRF в NukeViet CMS v4.5.07 Обзор Подделка запросов на стороне сервера SSRF существует в VINADES JSC NukeViet CMS v4.5.07 в функции удалённой загрузки администратора. Проблема позволяет аутентифицированному администратору инициировать...

recce

recce Pentest enumeration, vulnerability triage, exploitation...

Security Bulletin: IBM DataPower Gateway affected by server-side request forgery (CVE-2026-14521)

Summary IBM DataPower Gateway affected by server-side request forgery CVE-2026-14521 Vulnerability Details CVEID:CVE-2026-14521 DESCRIPTION: IBM DataPower Gateway is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the...

EUVD-2026-84976

IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-16426

IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-16426

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to server-side request forgery (SSRF) . This vulnerability allows an authenticated attacker to initiate unauthorized requests from the system, which may result in network enumeration or the facilitation of additional attacks. No specific rem...

CVE-2026-16426 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-16426 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

EUVD-2026-84515

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthenticated attackers to cause the affected device to establish SSH...

CVE-2026-80149 Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthenticated attackers to cause the...

CVE-2026-80148 Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthenticated attackers to cause the...

CVE-2026-16426: Server-Side Request Forgery (SSRF)

IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

PT-2026-97065

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description An authenticated attacker can exploit a server-side request forgery SSRF flaw. This allows the attacker to send unauthorized requests from the system, which may lead to network enumeration o...

CVE-2026-12766

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...