Lucene search
+L

444 matches found

Kitploit
Kitploit
added 2026/09/17 3:54 p.m.30 views

nimux

Pure-Nim network enumeration and remote execution toolkit nimux - Native Operator Toolkit nimux is a native command surface for authorized security assessments. It combines network enumeration, lightweight web discovery, credential validation, Active Directory operations, Kerberos workflows, remo...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/17 10:34 a.m.10 views

GoEnumerator

ACERCA DE GoEnumerator GoEnumerator es una herramienta que estoy escribiendo por diversión pero también para usar en mi propia enumeración, por lo que seguiré añadiendo más funciones para intentar acelerar los primeros pasos en cualquier enumeración de CTF o prueba de penetración profesional, e i...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/17 9:12 a.m.11 views

ActiveReign

ActiveReign ⚠️ Gracias por su apoyo. Este proyecto ya no se mantiene públicamente. Antecedentes Hace un tiempo me retaron a escribir una herramienta de descubrimiento con Python3 que pudiera automatizar el proceso de encontrar información sensible en recursos compartidos de archivos de red. Despué...

6.2AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/17 5:17 a.m.20 views

Praeda

This file is used to list a few config items and recommendation. Also some basic Praeda syntax Required perl modules: LWP::Simple LWP::UserAgent HTML::TagParser URI::Fetch HTTP::Cookies IO::Socket HTML::TableExtract Getopt::Std Net::SSL Net::SNMP NetAddr::IP; Quick CPAN command to make this happe...

5.7AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.29 views

BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery

Unauthenticated Server-Side Request Forgery SSRF vulnerability exists in the BrightSign digital signage media player affecting the Diagnostic Web Server DWS. The application parses user supplied data in the 'url' GET parameter to construct a diagnostics request to the Download Speed Test service...

6.9CVSS5.7AI score0.01119EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 12:36 p.m.9 views

enyx

enyx SNMP IPV6 Enumerator Tool - n3rdh4x0r -...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 8:13 p.m.6 views

CVE-2026-37197

CVE-2026-37197 - Server-Side Request Forgery SSRF in NukeViet CMS v4.5.07 Overview A Server-Side Request Forgery SSRF vulnerability exists in VINADES JSC NukeViet CMS v4.5.07 within the admin remote upload feature. The issue allows an authenticated administrator to trigger server-side HTTP reques...

6.2AI score
SaveExploits0References1
NVD
NVD
added 2026/09/14 9:17 p.m.6 views

CVE-2026-12766

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

5.4CVSS0.00181EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/14 9:17 p.m.5 views

CVE-2026-12767

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS0.00216EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/14 9:17 p.m.5 views

CVE-2026-12765

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS0.00216EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 8:31 p.m.28 views

CVE-2026-12765

IBM Langflow OSS versions 1.0.0 through 1.10.2 are vulnerable to server-side request forgery (SSRF) in several flow components, including LM Studio, Home Assistant, DeepSeek, xAI, Glean, HuggingFace Inference API, Ollama, LiteLLM, and Docling Serve. These components accept user-supplied URL value...

6.5CVSS5.7AI score0.00216EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 8:31 p.m.27 views

CVE-2026-12765 Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS0.00216EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 8:31 p.m.5 views

EUVD-2026-78086

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS5.7AI score0.00216EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 8:29 p.m.9 views

EUVD-2026-78084

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

5.4CVSS5.7AI score0.00181EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 8:29 p.m.20 views

CVE-2026-12766

IBM Langflow OSS (versions 1.0.0–1.11.2) is vulnerable to Server-Side Request Forgery (SSRF) across multiple components. The root cause involves missing or bypassable URL validation: the LMStudio and embeddings components pass a user-controlled base_url to httpx.AsyncClient without invoking the S...

5.4CVSS5.7AI score0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 8:29 p.m.27 views

CVE-2026-12766 Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

5.4CVSS0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 8:21 p.m.27 views

CVE-2026-12767 Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS0.00216EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 8:21 p.m.8 views

EUVD-2026-78083

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS5.7AI score0.00216EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 8:21 p.m.12 views

CVE-2026-12767

IBM Langflow OSS (versions 1.0.0 through 1.11.5) is affected by server-side request forgery (SSRF) due to missing egress validation on server-side URL fetches. The root cause involves specific connectors that bypass the platform's shared SSRF guard: the IBM Db2 Vector Store connector fetches a us...

6.5CVSS5.7AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/05 10:16 a.m.12 views

CVE-2026-86122

Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform server-side request forgery and enumerate internal network...

5.3CVSS0.00229EPSS
SaveExploits0References5
Rows per page
Query Builder