CVE-2021-26855_SSRF

CVE-2021-26855SSRF CVE-2021-26855 Exchange SSRF POC modifica il token & l'identificatore di ceye.io : token = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' dnsurl = randomstr + '.XXXXXX.ceye.io' python CVE-2021-26855SSRF.py https://a.com...

CVE-2024-21893.py

CVE-2024-21893 ist eine Server-Side-Request-Forgery-Schwachstelle in der SAML-Komponente von Ivanti Connect Secure 9.x, 22.x und Ivanti Policy Secure 9.x, 22.x und Ivanti Neurons for ZTA, die es einem Angreifer ermöglicht, ohne Authentifizierung auf bestimmte eingeschränkte Ressourcen zuzugreifen...

WebLogic-SSRF_CVE-2014-4210

WebLogic-SSRFCVE-2014-4210 Script di sfruttamento Weblogic SearchPublicRegistries SSRF CVE-2014-4210 basato su Python3 Utilizzo argomenti opzionali: -h, --help mostra questo messaggio di aiuto ed esci -u U URL del singolo target -uf UF Leggi URL da file -p P Scansiona solo le porte specificate -s...

CVE-2019-11581

CVE-2019–11581 PoC...

CVE-2022-28117

CVE-2022-28117 Navigate CMS = 2.9.4 - Server-Side Request Forgery Autenticato Descrizione Una Server-Side Request Forgery SSRF nella classe feedparser di Navigate CMS v2.9.4 consente a un attaccante remoto di forzare l'applicazione a effettuare richieste arbitrarie tramite l'iniezione di URL...

CVE-2026-16600

CVE-2026-16600 affects the SmartAIPress WordPress plugin through version 1.2.0 . The vulnerability is a full-read Server-Side Request Forgery (SSRF) caused by a missing capability check on the AJAX action smartaipress_openai_upload_and_set_featured_image combined with the absence of validation on...

CVE-2026-16947

The Total Processing Card Payments for WooCommerce WordPress plugin through version 7.3 contains an unauthenticated SSRF vulnerability. The plugin does not validate a user-supplied path before using it to build a server-side verification request, nor does it verify the authenticity of the respons...

EUVD-2026-68043

The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does not validate a user-supplied URL before fetching it server-side, allowing users with subscriber-level access and above to make the site retrieve arbitrary internal or external...

Xstream-1.4.17

Xstream-1.4.17 L'ambiente demo di Xstream sopra è stato costruito da me, l'ambiente di sfruttamento delle vulnerabilità si basa su JDK1.8u131, supporta test locali e invio di pacchetti HTTP remoti Riproduzione della vulnerabilità XSTREAM=1.4.17 CVE-2021-39141, CVE-2021-39144, CVE-2021-39150,...

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork：app:"Microsoft Exchange Server" Mit dem Seebug-Toolkit und pocsuite3 geschriebene Skripte MicrosoftExchangeServerSSRFCVE-2021-26855.py, um Daten des letzten Jahres zu untersuchen: Erfolgsrate etwa: 1500 / 5000 = 30%...

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc Esta vulnerabilidade é explorada falsificando o registro e os checkins de um agente demon para abrir um socket TCP no teamserver e ler/gravar dados a partir dele. Isso permite que atacantes vazem os IPs de origem dos teamservers e muito mais. Análise completa:...

CVE-2023-27163

PoC zu SSRF in Request-Baskets CVE-2023-27163 Dieses Repository enthält einen Proof-of-Concept PoC für CVE-2023-27163, eine Server-Side-Request-Forgery-Schwachstelle SSRF, die in request-baskets bis Version 1.2.1 entdeckt wurde. Diese Schwachstelle ermöglicht es Angreifern, über eine manipulierte...

EUVD-2026-67951

IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2023-27163---SSRF-Baskets-Requests

CVE-2023-27163---SSRF-Baskets-Requests Creato da TheAlchimist root@kitploit: cve-2023-27163-ssrfbaskets.py esempio : cve-2023-27163-ssrfbaskets.py http://mysite.com http://localhost...

CVE-2019-12384

CVE-2019-12384 Jackson RCE und SSRF 0x01 python -m SimpleHTTPServer root@kitploit: python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ... 127.0.0.1 - - 24/Jul/2019 03:06:32 "GET /inject.sql HTTP/1.1" 200 - inject.sql root@kitploit: CREATE ALIAS SHELLEXEC AS $$ String shellexecString cmd...

CVE-2026-19294

IBM Langflow OSS versions 1.0.0 through 1.11.1 are affected by an improper authorization flaw (CWE-639). Deprecated build endpoints remain fully routed but lack the object-level ownership check present on the modern equivalent endpoint, allowing any authenticated user to enumerate and execute ano...

CVE-2026-18891

IBM Langflow OSS versions 1.0.0 through 1.11.1 is affected by an improper authentication flaw (CWE-287) in the MCP project authentication function. When MCP Composer is enabled, the function omits the default auth_type=none value from the set of modes requiring an API key, causing unauthenticated...

Web-Security-Learning

Web-Security-Learning Endereço do projeto: https://github.com/CHYbeta/Web-Security-Learning Planeta do conhecimento Vulnerabilidades e Ataques: https://t.zsxq.com/mm2zBeq Índice: Web-Security-Learning Web Security Injeção SQL MySql MSSQL PostgreSQL MongoDB Técnicas Ferramentas XSS CSRF Outras...

CVE-2026-55247 plone.app.event: Denial of service via iCalendar import

plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or imported events, and commits work per...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - Server-Side Request Forgery non autenticata Descrizione Il plugin per WordPress Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player è vulnerabile a Server-Side Request Forgery in tutte le versioni fino alla 2.0.82 inclusa. Ciò consente a utent...