CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

EUVD-2020-31274

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

CVE-2023-27163

PoC de SSRF en Request-Baskets CVE-2023-27163 Este repositorio contiene una Prueba de Concepto PoC para CVE-2023-27163, una vulnerabilidad de Server-Side Request Forgery SSRF descubierta en request-baskets hasta la versión 1.2.1. Esta vulnerabilidad permite a atacantes acceder a recursos de red e...

Xstream-1.4.17

Xstream-1.4.17 El entorno de demostración de Xstream anterior fue configurado por mí. El entorno de explotación de vulnerabilidades se basa en JDK1.8u131. Ahora admite pruebas locales y envío remoto de paquetes HTTP. Reproducción de vulnerabilidades de XSTREAM=1.4.17 CVE-2021-39141, CVE-2021-3914...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

CVE-2026-102797

Server-Side Request Forgery SSRF vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0...

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc Esta vulnerabilidad se explota suplantando el registro y los checkins de un agente demon para abrir un socket TCP en el teamserver y leer/escribir datos desde él. Esto permite a los atacantes filtrar las IPs de origen de los teamservers y mucho más. Análisis...

CVE-2024-21893.py

CVE-2024-21893 es una vulnerabilidad de falsificación de solicitudes del lado del servidor SSRF en el componente SAML de Ivanti Connect Secure 9.x, 22.x, Ivanti Policy Secure 9.x, 22.x e Ivanti Neurons for ZTA que permite a un atacante acceder a ciertos recursos restringidos sin autenticación...

CVE-2026-102797 WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0...

CVE-2026-102797

The ThemeREX Addons plugin for WordPress (versions

EUVD-2026-91590

Server-Side Request Forgery SSRF vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0...

CVE-2026-104470

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in the Bazar valeur action that allows page editors to make the server fetch arbitrary URLs. Attackers can supply loopback or internal URLs in the url parameter to probe internal services and inject unescaped remote HTML th...

SSRF-CVE-2018-25031-

Este repositorio no tiene un README...

WebLogic-SSRF_CVE-2014-4210

WebLogic-SSRFCVE-2014-4210 Script de explotación de SSRF CVE-2014-4210 en Weblogic SearchPublicRegistries basado en Python3 Uso argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -u U URL objetivo única -uf UF Lee URLs desde un archivo -p P Escanea solo los puertos especificad...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 es una herramienta de descubrimiento de subdominios que encuentra y resuelve subdominios válidos y luego realiza fuzzing de SSRF/LFI/SQLi, fuerza bruta y escaneo de puertos. Tiene una...

Web-Security-Learning

Web-Security-Learning Repository: https://github.com/CHYbeta/Web-Security-Learning Knowledge Planet Vulnerability Attack and Defense: https://t.zsxq.com/mm2zBeq Table of Contents: Web-Security-Learning Web Security SQL Injection MySQL MSSQL PostgreSQL MongoDB Techniques Tools XSS CSRF Other...

CVE-2026-44578

CVE-2026-44578 — Next.js WebSocket Upgrade SSRF Pre-authentication Server-Side Request Forgery in Next.js self-hosted deployments. A single crafted HTTP request extracts AWS credentials, secrets, and internal service data from localhost:80. Field| Value ---|--- CVE| CVE-2026-44578 GHSA|...

Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230 Cisco Unified Communications Manager SSRF Escritura Arbitraria de Archivos a RCE: Proceso de Deducción y Reflexiones del PoC Ámbito de aplicación: solo para entornos locales de pruebas, entornos de reproducción autorizados, verificación de vulnerabilidades y análisis de reglas de...

CVE-2026-80464

Server-Side request forgery SSRF vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported...