nextssrf

root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...

CVE-2025-4123-Exploit-Tool-Grafana-

CVE-2025-4123 - Exploit Path Traversal di Grafana Sviluppato da mitsec Questo è uno strumento exploit proof-of-concept PoC per CVE-2025-4123 , una vulnerabilità critica di path traversal nell'endpoint /public di Grafana. L'exploit consente di eseguire: ✅ Server-Side Request Forgery SSRF ✅ Local...

CVE-2021-40438

CVE-2021-40438 Die Anforderung eines uri-path kann dazu führen, dass modproxy die Anfrage an einen vom entfernten Benutzer ausgewählten Ursprungsserver weiterleitet. Dieses Problem betrifft Apache HTTP Server 2.4.48 und frühere Versionen. Ein Angreifer kann diese Schwachstelle ausnutzen, indem er...

CVE-2024-4577-PHP-RCE

CVE-2024-4577-PHP-RCE Descrição do Projeto e Princípio Primeiro exploit do mundo para a vulnerabilidade CVE-2024-4577 PHP-CGI RCE usando o ambiente PHP padrão XAMPP. O primeiro exploit do mundo para CVE-2024-4577 PHP-CGI RCE utilizando o ambiente PHP padrão. Compartilhando exploit original, supor...

SSRFmap

SSRFmap SSRF são frequentemente usados para alavancar ações em outros serviços. Este framework tem como objetivo encontrar e explorar esses serviços facilmente. O SSRFmap recebe um arquivo de requisição do Burp como entrada e um parâmetro para fuzz. Server Side Request Forgery ou SSRF é uma...

Shadowbroker

🛰️ S H A D O W B R O K E R Intercettazione Globale delle Minacce — Piattaforma di Intelligenza Geospaziale in Tempo Reale ShadowBroker ShadowBroker è una piattaforma di intelligence decentralizzata che aggrega telemetria OSINT multi-dominio in tempo reale da oltre 60 feed di intelligence live in...

metabadger

Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...

metabadger

Metabadger Previeni gli attacchi SSRF su AWS EC2 tramite aggiornamenti automatici al più sicuro Instance Metadata Service v2 IMDSv2. Metabadger Scopo e funzionalità Diagnosticare e valutare l'uso attuale del AWS Instance Metadata Service, comprendendo come funziona il servizio Prepararti...

EUVD-2026-67400

wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export...

CVE-2026-82081

wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export...

cve-2026-40072-ssrf-lab

Lab SSRF CVE-2026-40072 Laboratorio locale pratico per dimostrare la CVE-2026-40072 in web3.py, mostrare l'impatto SSRF in Burp Suite e verificare la correzione ufficiale. Panoramica Questa repository contiene una proof of concept sicura e solo locale per la CVE-2026-40072, un problema di...

CVE-2026-78495

A server-side request forgery SSRF vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2026-78500

A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2026-78499

A server-side request forgery SSRF vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2024-39713

CVE-2024-39713: Rocket.Chat SSRF PoC Beschreibung Eine Server-Side Request Forgery SSRF betrifft den Twilio-Webhook-Endpunkt von Rocket.Chat vor Version 6.10.1. Links: https://nvd.nist.gov/vuln/detail/CVE-2024-39713 https://hackerone.com/reports/1886954 Verwendung root@kitploit: pip install -r...

CVE-2023-22047

Beschreibung: CVE-2023-22047 ist ein nicht authentifizierter Datei-Lesevorgang in Oracle PeopleSoft. Fortgeschrittene Angreifer können diese Schwachstelle jedoch ausnutzen, um Remote-Code-Ausführung Remote Code Execution, RCE zu erzielen. In der PeopleSoft-Anwendung "Portal.war" ermöglicht das...

CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer

CVE-2023-27163 - Proof of Concept SSRF di Request-Baskets Questa è una proof-of-concept PoC di exploit e un bruteforcer di porte localhost per CVE-2023-27163 , una vulnerabilità di server-side request forgery SSRF in Request-Baskets. La PoC sfrutta il parametro forwardurl per effettuare una...

VmWare-vCenter-vulnerability

Vulnerabilidades VMware Leitura arbitrária de arquivo não autorizada no VMware vCenter PoC funcionando para versões anteriores 7.0.2.00100 Consulta Shodan apenas para membros privados PoC PoC CVE-2021-21972 | RCE não autorizado no VMware PoC CVE-2021-21972 poc ssrf vmware | poc cve-2021-21975 poc...

PoC_CVE-2017-3164_CVE-2017-1262

Apache Solr Poc CVE-2017-3164 CVE-2017-12629 Questa cartella contiene exploit di esempio per Apache Solr CVE-2017-3164 CVE-2017-12629 Da usare SOLO per scopi educativi e con il pieno permesso del proprietario del server Apache Solr. Dovrai conoscere l'IP o il nome DNS del server Apache Solr e il...

CVE-2026-81848

A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function sfetchpage/sfetchpattern of the file src/scraplingfetchmcp/fetcher.py. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. Upgradi...