CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ For educational purposes and authorized environments only. Functional PoC for vulnerability CVE-2022-47447, which affects a vulnerable WordPress plugin, allowing a Cross-Site Request Forgery CSRF attack against authenticated users. VULNERABLE URL:...

CVE-2023-27163

PoC of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and sensitive...

CVE-2025-45250

CVE-2025-45250 Suggested description root@kitploit: MrDoc =0.95 is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file. POC root@kitploit: POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie...

CVE-2025-26206

🚨 CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 Welcome to the official repository documenting the discovery and details of CVE-2025-26206 , a critical Cross-Site Request Forgery CSRF vulnerability in Sell Done Storefront v.1.0. Discovered by B. Sibhi , this...

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork：app:"Microsoft Exchange Server" Using the script MicrosoftExchangeServerSSRFCVE-2021-26855.py written with Seebug toolkit and pocsuite3, to probe data from the past year: 成功率约为：1500 / 5000 = 30%...

Xstream-1.4.17

Xstream-1.4.17 The above Xstream Demo environment was built by me. The vulnerability exploitation environment is based on JDK1.8u131. It currently supports local testing and HTTP remote packet sending. XSTREAM=1.4.17 vulnerability reproduction CVE-2021-39141, CVE-2021-39144, CVE-2021-39150,...

CVE-2026-82081

wallabag versions 2 through 2.6.14 are affected by a Server-Side Request Forgery (SSRF) vulnerability caused by a crafted title or content field being mishandled during PDF export . The CVSS 3.1 score is 6.4 (Medium) with a scope change, indicating that exploitation could affect a different secur...

cve-2026-40072-ssrf-lab

مختبر CVE-2026-40072 SSRF مختبر محلي عملي لتوضيح CVE-2026-40072 في web3.py، وإظهار تأثير SSRF في Burp Suite، والتحقق من الإصلاح الرسمي. نظرة عامة يحتوي هذا المستودع على إثبات مفهوم آمن ومحلي فقط لـ CVE-2026-40072، وهي مشكلة تزوير الطلبات من جانب الخادم SSRF مرتبطة بمعالجة CCIP Read / OffchainLook...

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 Reference report: GHSA-pgpj-v85q-h5fm Questo repository contiene una configurazione docker compose che configura sia un server pyLoad sia un server attaccante che fornisce semplicemente un csrf.html. Per testare tu stesso, esegui docker composer up devi avere docker composer...

CVE-2023-27163---SSRF-Baskets-Requests

CVE-2023-27163---SSRF-Baskets-Requests Criado por TheAlchimist root@kitploit: cve-2023-27163-ssrfbaskets.py exemplo : cve-2023-27163-ssrfbaskets.py http://mysite.com http://localhost...

poc_proxylogon

pocproxylogon PoC do Microsoft Exchange ProxyLogon CVE-2021-26855 Este script foi originalmente criado por celesian para explorar esta CVE. Depois, eu o atualizei para explorar um servidor Exchange vulnerável a SSRF, mas ele obtém uma shell explorando o recurso EWS, porque uma empresa cliente...

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc Questa vulnerabilità viene sfruttata falsificando la registrazione e i check-in di un agente demon per aprire un socket TCP sul teamserver e leggere/scrivere dati da esso. Ciò consente agli attaccanti di far trapelare gli IP di origine dei teamserver e molto altr...

EUVD-2026-67301

A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function sfetchpage/sfetchpattern of the file src/scraplingfetchmcp/fetcher.py. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. Upgradi...

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Descrizione Un attaccante può sfruttare questa vulnerabilità caricando ed eseguendo un file PHP appositamente predisposto sulla piattaforma di hosting Ferozo. Una volta accessibile, il file lancia una serie di tentativi SS...

Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

CVE-2021-46080 एक्सप्लॉइट शीर्षक: वाहन सेवा प्रबंधन प्रणाली - 'मल्टीपल' क्रॉस-साइट रिक्वेस्ट फॉर्जरी CSRF संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS की ओर ले जाता है एक्सप्लॉइट लेखक: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 मध्यम संदर्भ:...

CVE-2021-46080

CVE-2021-46080 Titolo Exploit: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Porta a Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIO Riferimenti:...

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6: Cross-Site-Request-Forgery CSRF — Beliebigen Benutzer löschen Schweregrad: Hoch | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Inhaltsverzeichnis Übersicht Schwachstellendetails Auswirkungen Betroffene Version Angriffsszenario Proof of...

CVE-2021-21349

CVE-2021-21349 XStream SSRF Anúncio Oficial do XStream CVE-2021-21349 Vulnerabilidade CVE-2021-21349: Uma Solicitação de Falsificação do Lado do Servidor Server-Side Forgery Request pode ser ativada durante o unmarshalling com o XStream para acessar fluxos de dados de uma URL arbitrária que...

CVE-2025-67315

CSRF para Desativar Qualquer Funcionário Resumo A funcionalidade Gerenciar Funcionários é vulnerável a Cross-Site Request Forgery CSRF. Um atacante pode enganar um administrador logado para que envie uma solicitação forjada que desative um funcionário por exemplo, inid=1 sem o conhecimento ou...

Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

Exploit CSRF su SCOPIA XT Desktop versione 8.3.915.4 Questo PoC descriverà come sfruttare la Cross-Site Request Forgery CSRF su SCOPIA XT Desktop versione 8.3.915.4 Informazioni su SCOPIA sito web: https://support.avaya.com/products/P1421/scopia-desktop/8.2.1 Informazioni sulla Cross-Site Request...