CVE-2026-75898

CVE-2026-75898 — Componente Invoke di RAGFlow SSRF Server-Side Request Forgery CWE-918 nel componente "Invoke" del flusso agente di RAGFlow, prima della versione 0.26.3...

CVE-2022-28117

CVE-2022-28117 Navigate CMS = 2.9.4 - Server-Side Request Forgery Authentifiziert Beschreibung Eine Server-Side Request Forgery SSRF in der feedparser-Klasse von Navigate CMS v2.9.4 ermöglicht es entfernten Angreifern, die Anwendung zu zwingen, beliebige Anfragen durch die Injektion beliebiger UR...

CVE-2026-81271

Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...

halo-2.25.4-CVE-2026-67919

Authentifizierte Remote-Codeausführung RCE über unvalidierte Plugin-URI-Installation in Halo 2.25.4 1. Zusammenfassung der Schwachstelle Eine kritische Sicherheitslücke wurde in Halo Version 2.25.4 identifiziert. Die Anwendung stellt einen administrativen Endpunkt zur Installation oder...

CVE-2026-81273 WordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in FluentBooking Pro = 2.2.4 versions...

EUVD-2026-66951

Unauthenticated Cross Site Request Forgery CSRF in FluentBooking Pro = 2.2.4 versions...

CVE-2026-81273

FluentBooking Pro (WordPress plugin, versions

EUVD-2026-66949

Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Descrizione CVE-2024-47066 : Lobe Chat è un framework di chat di intelligenza artificiale open-source. Prima della versione 1.19.13, la protezione contro la server-side request forgery implementata in src/app/api/proxy/route.ts non considera i...

CVE-2024-27954

⚠️ CVE-2024-27954 💀 Automatic Remote code Execution Exploit Tools | Von GhostSec 💀 📝 Beschreibung Unzureichende Einschränkung eines Pfadnamens auf ein eingeschränktes Verzeichnis „Path Traversal“-Sicherheitslücke in WP Automatic Automatic ermöglicht Path Traversal und Server-Seitige Request...

CVE-2026-26801-pdfmake-ssrf

pdfmake SSRF-Schwachstellen-PoC Zusammenfassung der Schwachstelle...

GitLab-SSRF-CVE-2021-22214

CVE-2021-22214 POC per CVE-2021-22214: Gitlab SSRF Descrizione L'installazione remota di GitLab contiene una vulnerabilità di Server-side request forgery SSRF dovuta all'abilitazione della rete interna per i webhook. Un attaccante remoto non autenticato può sfruttare un'istanza GitLab con...

ProxyLogon-CVE-2021-26855-metasploit

ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 ProxyLogon Exchange SSRF zu beliebigem Dateischreiben Metasploit-Exploit-Skript Vorbereitung root@kitploit: git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p...

roller-csrf

Apache Roller v6.1.2 - Falsification de requête intersite CSRF dans la mise à jour du profil Détails de la vulnérabilité Version : v6.1.2 Date : 2025-11-09 Auteur de l'exploit : Van Lam Nguyen Facebook : https://www.facebook.com/vanlam1412 Page d'accueil du fournisseur : https://roller.apache.org...

Rocket.Chat - Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. id: CVE-2024-39713 info: name: Rocket.Chat - Server-Side Request Forgery SSRF author: iamnoooob,rootxharsh,pdresearch severity: high description: | A Server-Side Request Forgery SSRF affects...

Umbraco <7.4.0- Server-Side Request Forgery

Umbraco before version 7.4.0 contains a server-side request forgery vulnerability in feedproxy.aspx that allows attackers to send arbitrary HTTP GET requests via http://local/Umbraco/feedproxy.aspx?url=http://127.0.0.1:80/index. id: CVE-2015-8813 info: name: Umbraco 7.4.0- Server-Side Request...

WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery

WordPress Paytm Payment Gateway plugin through 2.7.0 contains a server-side request forgery vulnerability. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized...

Oracle Weblogic - Server-Side Request Forgery

An unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services. id: CVE-2014-4210 info: name: Oracle Weblogic - Server-Side Request Forgery author:...

WordPress Canto 1.3.0 - Blind Server-Side Request Forgery

WordPress Canto plugin 1.3.0 is susceptible to blind server-side request forgery. An attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized administrative...

Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery

Onair2 3.9.9.2 and KenthaRadio 2.0.2 have exposed proxy functionality to unauthenticated users. Sending requests to this proxy functionality will have the web server fetch and display the content from any URI, allowing remote file inclusion and server-side request forgery. id: CVE-2021-24472 info...