Lucene search
+L

57531 matches found

Kitploit
Kitploit
added 2026/08/28 5:07 a.m.5 views

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ For educational purposes and authorized environments only. Functional PoC for vulnerability CVE-2022-47447, which affects a vulnerable WordPress plugin, allowing a Cross-Site Request Forgery CSRF attack against authenticated users. VULNERABLE URL:...

8.8CVSS8.1AI score0.0026EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 4:46 a.m.2 views

CVE-2023-27163

PoC of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and sensitive...

6.5CVSS6.1AI score0.06591EPSS
SaveExploits29References4
Kitploit
Kitploit
added 2026/08/28 4:25 a.m.2 views

CVE-2025-45250

CVE-2025-45250 Suggested description root@kitploit: MrDoc =0.95 is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file. POC root@kitploit: POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie...

5.5CVSS5.5AI score0.0028EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 4:19 a.m.3 views

CVE-2025-26206

🚨 CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 Welcome to the official repository documenting the discovery and details of CVE-2025-26206 , a critical Cross-Site Request Forgery CSRF vulnerability in Sell Done Storefront v.1.0. Discovered by B. Sibhi , this...

9CVSS5.5AI score0.00598EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/28 3:59 a.m.3 views

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork:app:"Microsoft Exchange Server" Using the script MicrosoftExchangeServerSSRFCVE-2021-26855.py written with Seebug toolkit and pocsuite3, to probe data from the past year: 成功率约为:1500 / 5000 = 30%...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits65References1
Kitploit
Kitploit
added 2026/08/28 2:46 a.m.3 views

Xstream-1.4.17

Xstream-1.4.17 The above Xstream Demo environment was built by me. The vulnerability exploitation environment is based on JDK1.8u131. It currently supports local testing and HTTP remote packet sending. XSTREAM=1.4.17 vulnerability reproduction CVE-2021-39141, CVE-2021-39144, CVE-2021-39150,...

8.5CVSS7.7AI score0.98124EPSS
SaveExploits9References1
CVE
CVE
added 2026/08/28 2:40 a.m.4 views

CVE-2026-82081

wallabag versions 2 through 2.6.14 are affected by a Server-Side Request Forgery (SSRF) vulnerability caused by a crafted title or content field being mishandled during PDF export . The CVSS 3.1 score is 6.4 (Medium) with a scope change, indicating that exploitation could affect a different secur...

6.4CVSS5.2AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 2:18 a.m.4 views

cve-2026-40072-ssrf-lab

مختبر CVE-2026-40072 SSRF مختبر محلي عملي لتوضيح CVE-2026-40072 في web3.py، وإظهار تأثير SSRF في Burp Suite، والتحقق من الإصلاح الرسمي. نظرة عامة يحتوي هذا المستودع على إثبات مفهوم آمن ومحلي فقط لـ CVE-2026-40072، وهي مشكلة تزوير الطلبات من جانب الخادم SSRF مرتبطة بمعالجة CCIP Read / OffchainLook...

7.2CVSS5.2AI score0.00229EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/28 1:22 a.m.3 views

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 Reference report: GHSA-pgpj-v85q-h5fm Questo repository contiene una configurazione docker compose che configura sia un server pyLoad sia un server attaccante che fornisce semplicemente un csrf.html. Per testare tu stesso, esegui docker composer up devi avere docker composer...

9.6CVSS8AI score0.00948EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/28 1:15 a.m.4 views

CVE-2023-27163---SSRF-Baskets-Requests

CVE-2023-27163---SSRF-Baskets-Requests Criado por TheAlchimist root@kitploit: cve-2023-27163-ssrfbaskets.py exemplo : cve-2023-27163-ssrfbaskets.py http://mysite.com http://localhost...

6.5CVSS6.1AI score0.06591EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/08/28 1:11 a.m.5 views

poc_proxylogon

pocproxylogon PoC do Microsoft Exchange ProxyLogon CVE-2021-26855 Este script foi originalmente criado por celesian para explorar esta CVE. Depois, eu o atualizei para explorar um servidor Exchange vulnerável a SSRF, mas ele obtém uma shell explorando o recurso EWS, porque uma empresa cliente...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/28 1:04 a.m.4 views

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc Questa vulnerabilità viene sfruttata falsificando la registrazione e i check-in di un agente demon per aprire un socket TCP sul teamserver e leggere/scrivere dati da esso. Ciò consente agli attaccanti di far trapelare gli IP di origine dei teamserver e molto altr...

9.8CVSS5.3AI score0.02909EPSS
SaveExploits6References1
EUVD
EUVD
added 2026/08/28 12:32 a.m.3 views

EUVD-2026-67301

A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function sfetchpage/sfetchpattern of the file src/scraplingfetchmcp/fetcher.py. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. Upgradi...

5.1CVSS4.7AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/28 12:18 a.m.3 views

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Descrizione Un attaccante può sfruttare questa vulnerabilità caricando ed eseguendo un file PHP appositamente predisposto sulla piattaforma di hosting Ferozo. Una volta accessibile, il file lancia una serie di tentativi SS...

5.5AI score
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 9:24 p.m.2 views

Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

CVE-2021-46080 एक्सप्लॉइट शीर्षक: वाहन सेवा प्रबंधन प्रणाली - 'मल्टीपल' क्रॉस-साइट रिक्वेस्ट फॉर्जरी CSRF संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS की ओर ले जाता है एक्सप्लॉइट लेखक: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 मध्यम संदर्भ:...

4.8CVSS5AI score0.0058EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 9:23 p.m.6 views

CVE-2021-46080

CVE-2021-46080 Titolo Exploit: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Porta a Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIO Riferimenti:...

4.8CVSS4.9AI score0.0058EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 9:04 p.m.2 views

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6: Cross-Site-Request-Forgery CSRF — Beliebigen Benutzer löschen Schweregrad: Hoch | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Inhaltsverzeichnis Übersicht Schwachstellendetails Auswirkungen Betroffene Version Angriffsszenario Proof of...

8.1CVSS7.9AI score0.00616EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 8:42 p.m.5 views

CVE-2021-21349

CVE-2021-21349 XStream SSRF Anúncio Oficial do XStream CVE-2021-21349 Vulnerabilidade CVE-2021-21349: Uma Solicitação de Falsificação do Lado do Servidor Server-Side Forgery Request pode ser ativada durante o unmarshalling com o XStream para acessar fluxos de dados de uma URL arbitrária que...

8.6CVSS6.6AI score0.46826EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/27 6:51 p.m.3 views

CVE-2025-67315

CSRF para Desativar Qualquer Funcionário Resumo A funcionalidade Gerenciar Funcionários é vulnerável a Cross-Site Request Forgery CSRF. Um atacante pode enganar um administrador logado para que envie uma solicitação forjada que desative um funcionário por exemplo, inid=1 sem o conhecimento ou...

5.2AI score0.0007EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 6:07 p.m.1 views

Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

Exploit CSRF su SCOPIA XT Desktop versione 8.3.915.4 Questo PoC descriverà come sfruttare la Cross-Site Request Forgery CSRF su SCOPIA XT Desktop versione 8.3.915.4 Informazioni su SCOPIA sito web: https://support.avaya.com/products/P1421/scopia-desktop/8.2.1 Informazioni sulla Cross-Site Request...

5.2AI score
SaveExploits0
Rows per page
Query Builder