CVE-2026-115810

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

EUVD-2026-109097

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

CVE-2026-115810 Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

CVE-2026-115810 Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

CVE-2026-115810

Tandoor Recipes versions before 2.7.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the Pestle importer . The root cause is located in cookbook/integration/pestle.py, where the application performs a requests.get call that bypasses the centralized requests-hardened S...

PT-2026-122152

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

TheServer Detection

Checks whether TheServer is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

OSSEC/Wazuh ossec-authd Service Detection (TCP)

TCP based detection of a OSSEC/Wazuh ossec-authd service. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

coturn Detection (HTTP)

Detection of coturn. The script sends a connection request to the server and attempts to detect coturn and to extract its version. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Nagios Fusion Detection (HTTP)

HTTP based detection of Nagios Fusion. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.813251";...

Crestron Device Detection (CTP)

Crestron Terminal Protocol CTP based detection of Crestron devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

akka HTTP Detection

Detection of akka HTTP server. The script sends a connection request to the server and attempts to detect akka HTTP server and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

Teleopti WFM Detection

Detection of Teleopti WFM The script sends a HTTP connection request to the server and attempts to detect the presence of Teleopti WFM and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Schneider Electric Devices Detection (Modbus)

Modbus protocol based detection of Schneider Electric devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Avaya Aura Conferencing Detection (SIP)

Detection of Avaya Aura Conferencing. The script attempts to identify Avaya Aura Conferencing via SIP banner to extract the model and version number. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

pfSense Detection (HTTP)

HTTP based detection of pfSense. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.806807";...

Monsta FTP Detection (HTTP)

HTTP based detection of Monsta FTP. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.806051";...

Sonatype Nexus OSS/Pro Version Detection

Detects the installed version of Sonatype Nexus. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

UPS WebSNMP-Manager CS121 - Authentication Bypass

UPS WebSNMP-Manager CS121 - Authentication Bypass source: https://www.securityfocus.com/bid/67438/info UPS Web/SNMP-Manager CS121 is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication mechanism and gain access to the HTTPs, SNMP or Telnet po...

Webuzo Detection (HTTP)

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...