CVE-2026-84175

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT Web of Things ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without validating the target host, and follows HTTP redirects without re-validating the redirect target and...

Security Bulletin: IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint

Summary IBM ContextForge MCP Gateway contains a server-side request forgery SSRF vulnerability in its Agent-to-Agent A2A invocation endpoint POST /a2a/agentname/invoke. Unlike every other outbound egress path in the gateway, the A2A invocation path does not pin the DNS-resolved IP address at...

CVE-2024-34958

CVE-2024-34957 idccms CSRF poc CVE-2024-34958 idccms CSRF poc...

halo-2.25.4-CVE-2026-67919

Halo 2.25.4의 검증되지 않은 플러그인 URI 설치를 통한 인증된 원격 코드 실행RCE 1. 취약점 요약 Halo 버전 2.25.4에서 심각한 보안 취약점이 확인되었습니다. 이 애플리케이션은 원격 URI에서 플러그인을 설치하거나 업그레이드할 수 있는 관리자 엔드포인트를 제공합니다. 그러나 시스템은 URI의 소스 도메인을 검증하지 못하며, 이 특정 구성 요소에는 SSRF서버 측 요청 위조 보호 기능이 없습니다. 플러그인 관리 권한이 있는 인증된 공격자는 악의적으로 제작된 플러그인 JAR 파일에 대한 링크를 제공할 수...

Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery

Onair2 3.9.9.2 and KenthaRadio 2.0.2 have exposed proxy functionality to unauthenticated users. Sending requests to this proxy functionality will have the web server fetch and display the content from any URI, allowing remote file inclusion and server-side request forgery. id: CVE-2021-24472 info...

XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

DedeCMS 5.7SP2 - Cross-Site Request Forgery/Remote Code Execution

DedeCMS 5.7SP2 is susceptible to cross-site request forgery with a corresponding impact of arbitrary code execution because the partcode parameter in a tagtestaction.php request can specify a runphp field in conjunction with PHP code. id: CVE-2018-7700 info: name: DedeCMS 5.7SP2 - Cross-Site...

CVE-2026-81432

CVE-2026-81432 affects the JetStyleManager for Gutenberg WordPress plugin in versions before 1.3.9 . The root cause is a missing CSRF protection on certain AJAX actions, allowing an attacker to craft a request that, when executed by a logged-in user with the edit_posts capability (Contributor or ...

CVE-2026-44578

🚨 CVE-2026-44578 — Уязвимость SSRF в Next.js 📌 Обзор CVE-2026-44578 — это уязвимость подделки серверных запросов SSRF высокой степени серьезности , затрагивающая Next.js приложения, размещенные самостоятельно. Злоумышленники могут использовать специально созданные запросы на обновление WebSocket ...

CVE-2025-45250

CVE-2025-45250 제안된 설명 root@kitploit: MrDoc =0.95 is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file. POC root@kitploit: POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie User-Agent: Mozilla/5...

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 참고 보고서: GHSA-pgpj-v85q-h5fm 이 저장소는 pyLoad 서버와 csrf.html만을 제공하는 공격자 서버를 모두 설정하는 docker compose 구성을 포함합니다. 직접 테스트하려면 docker composer up을 실행하세요 docker 외에 docker composer도 설치되어 있어야 합니다. 그런 다음 localhost:8000으로 이동합니다. 이곳은 pyLoad 로그인 페이지이며, 사용자 pyload와 비밀번호 pyload로 로그인합니다. 그런 다음...

CVE-2026-84697

Mailpit (open-source mail testing tool) contains a Server-Side Request Forgery (SSRF) vulnerability in its IsInternalIP deny list function (file: internal/tools/net.go). The deny list fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix , all...

poc_proxylogon

pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 이 스크립트는 원래 celesian이 이 CVE를 익스플로잇하기 위해 만든 것입니다. 그런 다음 SSRF에 취약한 Exchange 서버를 익스플로잇하도록 업데이트했지만, EWS 기능을 통해 셸을 획득합니다. 고객사가 /ecp/DDI/DDIService.svc/ 기능을 비활성화하여 Exchange 서버에 패치를 적용했기 때문입니다. lol 이 스크립트는 여러 환경에서 작동하지 않을 수 있으며, 이 코드는 단순히 환경이...

EUVD-2026-69724

WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the getdomain and isSameDomain functions that fail to properly validate referer origins. Attackers can forge requests from sibling subdomains or unparseable long-gTLD origins to perform administrative...

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations...

CVE-2025-10377

Proof of Concept CVE-2025-10377 사이트 간 요청 위조CSRF – 플러그인 시스템 대시보드 함수 sdtogglelogs 취약점 유형: 사이트 간 요청 위조 CSRF 영향을 받는 함수: sdtogglelogs CVSS v3.1: 4.3 중간 Vector: AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N 참고: 점수는 관리자 피해자와 사용자 상호작용이 필요한 승인되지 않은 상태 변경을 반영합니다. 취약점 설명: sdtogglelogs 함수는 페이지 접근 로그, 오류 로그, 이메일 전송 로그의...

CVE-2021-24085

Microsoft Exchange Server msExchEcpCanary 跨站请求伪造特权提升漏洞 这是 CVE-2021-24085 的概念验证。 1. poc.py 下载包含私钥的目标证书文件 2. YellowCanary 根据 SID 为特定用户生成 msExchEcpCanary CSRF 令牌 3. poc.js 是用于触发账户接管漏洞的 CSRF 利用代码 我没有提供 malicifest.xml 文件，但你可以从以下参考资料部分中找到关于如何生成恶意清单文件的信息。 示例 获取包含私钥的证书： root@kitploit:...

CVE-2026-76851

A Server-Side Request Forgery (SSRF) vulnerability in GitHub Enterprise Server allowed remote code execution on the instance. The root cause was insufficient network isolation that permitted malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests ...

EUVD-2026-55971

TYPO3 CMS - Broken Access Control in Backend and Install Tool...

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...