CVE-2021-32159

..| CSRFtoCommandInjection1 |.. Descripción : Explotando un ataque de falsificación de peticiones entre sitios CSRF para conseguir una inyección de comandos a través de la función de Carga y Descarga de Webmin Versión probada : Webmin 1.973 última versión de GitHub 07/03/2021 Tipo de ataque: Remo...

CVE-2025-55182-exploit

⚠️ DISCLAIMER This tool is for authorized security testing and educational purposes ONLY. Only test systems you own or have explicit written permission to test Unauthorized use is illegal and unethical The developers assume no liability for misuse Use responsibly and in compliance with all...

CVE-2026-105122

OpenAM versions prior to 16.1.3 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The root cause is an unvalidated jwks_uri parameter during the registration or modification of OAuth 2.0 clients. An attacker can leverage this to force the server to fetch internal resources, po...

EUVD-2026-92026

OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwksuri. Attackers can trigger unauthenticated fetches through client-authentication and ID-token...

SSRF-CVE-2018-25031-

This repository does not have a README...

cve-2022-1040

Entorno En el entorno de Python 3.10 It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall pyOpenSSL pip3...

CVE-2021-31760

..| CVE-2021-31760 |.. Descripción : Explotando un ataque de falsificación de solicitudes entre sitios CSRF para obtener una ejecución remota de comandos RCE a través de la función de procesos en ejecución de Webmin Versión probada : Webmin 1.973 última versión de GitHub 07/03/2021 Tipo de ataque...

CVE-2006-20001

CVE-2006-20001 A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. authentication| complexity|...

CVE-2026-13156

CVE-2026-13156 — MailerSend Official SMTP Integration !IMPORTANT Resumen: Se descubrió una vulnerabilidad de Falsificación de Solicitudes entre Sitios CSRF de severidad alta CVE-2026-13156 en el plugin oficial MailerSend SMTP Integration para WordPress 1.0.8. El manejador de eliminación de...

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Description An attacker can exploit this vulnerability by uploading and executing a specially crafted PHP file on the Ferozo hosting platform. When accessed, the file launches a series of SSRF attempts targeting internal...

CVE-2022-34265

CVE-2022-34265 Vulnerability Summary This vulnerability is due to improper string processing when executing SQL for the arguments of the functions Trunc and Extract used for date data in Django. By specifying the request parameters as is in the kind argument of Trunc or the lookupname argument of...

reverse-engineering-browser

Reverse Engineering Browser See the browser evidence behind fingerprints, requests, scripts, and runtime behavior. A local-first research browser and macOS workspace for inspecting authorized web applications. v0.2.1 released Origin Trace Traffic now has a full-width, DevTools-style request table...

CVE-2019-20372

REFER https://bertjwregeer.keybase.pub/2019-12-10%20-%20errorpage%20request%20smuggling.pdf Chạy Server docker run -it --rm -p 80:80 -v pwd/default.conf:/etc/nginx/conf.d/default.conf nginx:1.17.6 Khai thác printf "GET /a HTTP/1.1\r\nHost: localhost\r\nContent-Length: 56\r\n\r\nGET...

CVE-2025-67315

CSRF to Deactivate Any Employee Summary The Manage Employees functionality is vulnerable to Cross-Site Request Forgery CSRF. An attacker can trick a logged-in admin into sending a forged request that inactivates an employee e.g., inid=1 without the admin’s knowledge or consent. CVSS Base Score: 5...

roller-csrf

Apache Roller v6.1.2 - Falsificación de Solicitudes entre Sitios CSRF en la Actualización de Perfil Detalles de la Vulnerabilidad Versión : v6.1.2 Fecha : 2025-11-09 Autor del Exploit : Van Lam Nguyen Facebook : https://www.facebook.com/vanlam1412 Página del Proveedor : https://roller.apache.org...

CVE-2020-27223

CVE-2020-27223 Using $ mvn spring-boot:run 9.4.36.v20210114 $ ./poc/cve-2020-27223-poc1.sh "timens":"58,557","acceptlanguage":"aab" real 0m0.093s 🐇 user 0m0.006s sys 0m0.007s "timens":"18,461,763,438","acceptlanguage":"ahn" real 0m35.339s 🐢 user 0m0.006s sys 0m0.006s 9.4.37.v20210219 Fixed $...

cve-2023-33476

CVE-2023-33476 ReadyMedia MiniDLNA versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values tha...

SAP Solution Manager 7.2 - Remote Command Execution

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

CVE-2026-37064

CVE-2026-37064 User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endpoint with a chosen 'username' parameter to test if the user...

CVE-2026-18143

CVE-2026-18143 — Request a Quote for WooCommerce Addify Carga Arbitraria de Archivos PoC en Python 3 para CVE-2026-18143 en Request a Quote for WooCommerce woocommerce-request-a-quote, Addify / WooCommerce.com. Descripción PoCbit / GitHub CVE-2026-18143 — Request a Quote for WooCommerce ≤ 2.9.2...