CVE-2025-39601

🚨 CVE-2025-39601 - CSRF к RCE в плагине Custom CSS, JS & PHP для WordPress WordPress Custom CSS, JS & PHP plugin CSRF PoC - WordPress Custom CSS, JS & PHP plugin By : Nxploited | Khaled Alenazi form action="http://192.168.100.74:888/wordpress4/wp-admin/tools.php?page=a...

CVE-2026-62142

Cross-Site Request Forgery CSRF vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0...

CVE-2026-106611

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...

CVE-2025-45250

CVE-2025-45250 Предлагаемое описание MrDoc =0.95 is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file. POC POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie User-Agent: Mozilla/5.0 Windows NT...

EUVD-2026-94955

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...

CVE-2026-106611

The WPMU DEV Forminator plugin (versions n/a through 1.57.3 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. The vulnerability is associated with CWE-352 and has a High base sever...

cve-2026-40072-ssrf-lab

CVE-2026-40072 SSRF-лаборатория Практическая локальная лаборатория для демонстрации CVE-2026-40072 в web3.py, показа воздействия SSRF в Burp Suite и проверки официального исправления. Обзор Этот репозиторий содержит безопасное локальное доказательство концепции для CVE-2026-40072 — проблемы...

ConceptronicIPCam_MultipleVulnerabilities

Множественные уязвимости в IP-камерах Conceptronic с веб-прошивкой 0.61.X. Уязвимости CSRF и отказа в обслуживании были обнаружены в IP-камерах Conceptronic. CVE| Описание ---|--- CVE-2018-6407| Неаутентифицированная удаленная уязвимость отказа в обслуживании CVE-2018-6408| CSRF позволяет изменит...

poc_proxylogon

pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 이 스크립트는 원래 celesian이 이 CVE를 익스플로잇하기 위해 만든 것입니다. 그런 다음 SSRF에 취약한 Exchange 서버를 익스플로잇하도록 업데이트했지만, EWS 기능을 통해 셸을 획득합니다. 고객사가 /ecp/DDI/DDIService.svc/ 기능을 비활성화하여 Exchange 서버에 패치를 적용했기 때문입니다. lol 이 스크립트는 여러 환경에서 작동하지 않을 수 있으며, 이 코드는 단순히 환경이...

CVE-2026-62142

The Melapress WP 2FA plugin (wp-2fa) for WordPress is affected by a Cross-Site Request Forgery (CSRF) vulnerability in versions 4.1.0 and below . This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. The documentation does not specify the exact component...

EUVD-2026-94932

Cross-Site Request Forgery CSRF vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0...

Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

CVE-2021-46080 Название эксплойта: Vehicle Service Management System - 'Множественная' Межсайтовая подделка запроса CSRF приводит к хранимому межсайтовому скриптингу XSS Автор эксплойта: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 СРЕДНИЙ Ссылки:...

cve-2016-4845_csrf

cve-2016-4845csrf Доказательство концепции для уязвимости CSRF CVE-2016-4825 на IO-DATA Recording Hard Disc Drive. License Эти коды выпущены под лицензией MIT. Пожалуйста, обратитесь к LICENSE.txt...

CVE-2024-21893.py

CVE-2024-21893 — это уязвимость типа server-side request forgery SSRF в компоненте SAML продуктов Ivanti Connect Secure 9.x, 22.x, Ivanti Policy Secure 9.x, 22.x и Ivanti Neurons for ZTA, которая позволяет злоумышленнику получать доступ к определённым ограниченным ресурсам без аутентификации...

CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers

CVE-2025-44603 CSRF-уязвимость: приводит к созданию фальшивых клиентов Название проекта и URL репозитория:https://phpgurukul.com/client-management-system-using-php-mysql/ Название уязвимости: Межсайтовая подделка запроса CSRF Затронутая версия: V1.2 Введение Уязвимость межсайтовой подделки запрос...

CVE-2026-107449

A flaw was found in Heimdall. This vulnerability allows an unauthenticated remote attacker to cause information disclosure via server-side request forgery SSRF. The application fails to enforce IP address restrictions when sending outbound requests for enhanced application testing and live...

gitlab-cve-2021-22214

gitlab-cve-2021-22214 Gitlab SSRF Подпишитесь на нас Vulnmachines YouTube Twitter Facebook LinkedIn...

Apache OFBiz < 18.12.11 - Server Side Request Forgery

Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations. The same uri can be operated to realize a SSRF attack also without authorizations. Users are recommended to upgrade to version 18.12.11, which fixes th...

All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery

WordPress All-in-One Video Gallery plugin through 2.6.0 is susceptible to arbitrary file download and server-side request forgery SSRF via the 'dl' parameter found in the /public/video.php file. An attacker can download sensitive files hosted on the affected server and forge requests to the serve...

Gitlab CE/EE 10.5 - Server-Side Request Forgery

GitLab CE/EE versions starting from 10.5 are susceptible to a server-side request forgery vulnerability when requests to the internal network for webhooks are enabled, even on a GitLab instance where registration is limited. The same vulnerability actually spans multiple CVEs, due to similar...