OsTicket < 1.14.3 - Server Side Request Forgery

SSRF vulnerability exists in osTicket before 1.14.3, allowing an attacker to add malicious files to the server or perform port scanning. id: CVE-2020-24881 info: name: OsTicket 1.14.3 - Server Side Request Forgery author: hnd3884 severity: critical description: | SSRF vulnerability exists in...

PT-2026-104071

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch url of the file mcp server fetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side reque...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — Análisis de Vulnerabilidad en SonicWall SMA1000 Un proyecto de ciberseguridad que explora una vulnerabilidad del mundo real, su impacto potencial y cómo los equipos de seguridad pueden detectar, corregir y verificar el problema. Descripción General del Proyecto Este proyecto form...

CVE-2026-75898

CVE-2026-75898 — Componente SSRF en Invoke de RAGFlow Server-Side Request Forgery CWE-918 en el componente "Invoke" del flujo de trabajo de agentes de RAGFlow, antes de 0.26.3. | ---|--- CVE| CVE-2026-75898 CVSS| 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Corregido en| v0.26.3 Commits de...

halo-2.25.4-CVE-2026-67919

Ejecución Remota de Código RCE Autenticada mediante Instalación de Plugins con URI no Validado en Halo 2.25.4 1. Resumen de la Vulnerabilidad Se ha identificado una vulnerabilidad de seguridad crítica en la versión 2.25.4 de Halo. La aplicación proporciona un endpoint administrativo para instalar...

CVE-2026-26801-pdfmake-ssrf

PoC de Vulnerabilidad SSRF en pdfmake Resumen de la Vulnerabilidad Campo| Valor ---|--- Paquete| pdfmake Versión| = 0.3.0-beta.2, CREDENTIALS LEAKED! Esto demuestra que el servidor vul...

GitLab-SSRF-CVE-2021-22214

CVE-2021-22214 POC para CVE-2021-22214: SSRF en Gitlab Descripción La instalación remota de GitLab contiene una vulnerabilidad de falsificación de solicitudes del lado del servidor SSRF como resultado de que la red interna para webhooks está habilitada. Un atacante remoto no autenticado puede...

OpenStack Swift vulnerable to authenticated server-side request forgery

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

CVE-2025-55853

CVE-2025-55853 - Inclusión de Archivos Local mediante Server Side Request Forgery SoftVision webPDF anterior a 10.0.2 es vulnerable a Server-Side Request Forgery SSRF. Acerca de Este PoC para CVE-2025-55853 demuestra Server Side Request Forgery en la herramienta webPDF webPDF. utilizada para...

fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...

CVE-2025-45250

CVE-2025-45250 Descripción sugerida MrDoc =0.95 es vulnerable a Server-Side Request Forgery SSRF en la función validateurl del archivo appdoc/utils.py. POC POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie User-Agent: Mozilla/5.0 Windows NT 10.0;...

poc_proxylogon

pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 Este script fue creado originalmente por celesian para explotar este CVE. Luego lo actualicé para explotar un servidor de Exchange vulnerable a SSRF, pero obtuve una shell explotando la función EWS, porque una empresa cliente parcheó ...

CVE-2026-103291

Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network...

CVE-2026-103082

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

EUVD-2026-90684

Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network...

EUVD-2026-90747

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-103542

A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smartfill of the file /global/code/actions.php of the component AJAX Endpoint. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. The exploit has be...

CVE-2026-103542 formtools.org Form Tools AJAX Endpoint actions.php smart_fill server-side request forgery

A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smartfill of the file /global/code/actions.php of the component AJAX Endpoint. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. The exploit has be...

CVE-2026-103542 formtools.org Form Tools AJAX Endpoint actions.php smart_fill server-side request forgery

A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smartfill of the file /global/code/actions.php of the component AJAX Endpoint. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. The exploit has be...

EUVD-2026-90502

A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smartfill of the file /global/code/actions.php of the component AJAX Endpoint. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. The exploit has be...