pd-agent

ProjectDiscovery Cloud Platform — 에이전트 기능 • 빠른 시작 • 설치 • 구성 • 확장 기능 pd-agent를 사용하면 ProjectDiscovery Cloud Platform에서 자신의 내부 네트워크를 스캔할 수 있습니다. 스캔하려는 네트워크 내의 머신VM, 서버, 워크스테이션, Kubernetes 파드에 에이전트를 설치하고 PDCP 팀에 연결하세요. 클라우드 UI에서 개인 IP, 내부 호스트명, VPC 범위 또는 Kubernetes 클러스터를 대상으로 스캔을 시작하면, 에이전트가 로컬에서 실행하...

behave

Behave! 아직 개발 중인 악성 페이지를 모니터링하는 브라우저 확장 프로그램입니다. 참고 : 이 프로젝트의 코드 저장소입니다. 패키징된 확장 프로그램을 찾고 있다면: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome: https://chrome.google.com/webstore/detail/mppjbkhgconmemoeagfbgilblohhcica/ 소개 Behave! 는 웹 페이지가 다음 작업 중 하나를 수행하는지 모니터링하고 경고합니다: 브라...

CVE-2026-34160

CVE-2026-34160 — Unauthenticated SSRF in Chamilo LMS via PENS plugin pens.php Severity : High CVSS 8.6 CWE : CWE-918 Server-Side Request Forgery Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-g2xj-4cch-j276 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-34160 Credit ...

GHSA-R7F2-6FJ8-6FG2 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A successful attack would not result in any response data being returned...

NPM: Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

NPM: Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses vulnerability discovered by ? in WordPress Npm ghost versions = 6.0.9, 6.65.0...

CVE-2026-105648 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

EUVD-2026-91835

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF proxying of requests to private IP addresses...

CVE-2026-105048

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF proxying of requests to private IP addresses...

CVE-2026-105048

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF proxying of requests to private IP addresses...

CVE-2026-105048

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF proxying of requests to private IP addresses...

CVE-2026-105048

The Playground feature in Zilliz Attu versions prior to 3.0.0 is vulnerable to Server-Side Request Forgery (SSRF) . This flaw allows an attacker to proxy requests to private IP addresses . No specific remediation or exploit details are provided in the documents.

CVE-2026-105048

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF proxying of requests to private IP addresses...

CVE-2026-94483

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL...

CVE-2026-94483 Next.js: Server-Side Request Forgery in Image Optimization

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL...

CVE-2026-94483 Next.js: Server-Side Request Forgery in Image Optimization

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL...

CVE-2026-94483

The Next.js React framework (versions 16.0.0 through 16.3.8 ) contains a Server-Side Request Forgery (SSRF) vulnerability within the Image Optimization component. The root cause is that the framework can follow attacker-controlled DNS resolution for remote URLs that match images.remotePatterns. T...

CVE-2026-94483: Server-Side Request Forgery (SSRF)

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL...

Linux Distros Unpatched Vulnerability : CVE-2026-94483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolutio...

PT-2026-104451

Name of the Vulnerable Software and Affected Versions Zilliz Attu versions prior to 3.0.0 Description The Playground feature allows Server-Side Request Forgery SSRF, a condition where the server can be coerced into making requests to private IP addresses, effectively acting as a proxy...

PT-2026-104375

Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.3.7 Description Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns. This allows the optimized image fetch to reach private IP addresses after...