Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

11208 matches found

CVE
CVE•added 2026/09/29 2:45 a.m.•15 views

CVE-2026-102244

MODSetter SurfSense versions up to 0.0.36 are vulnerable to a server-side request forgery (SSRF) flaw within the Document Export Feature . The vulnerability exists in an unspecified function located in surfsense_backend/app/routes/editor_routes.py. This flaw allows for remote manipulation that ca...

5.3CVSS4.8AI score0.00227EPSS
SaveExploits0References8
Kitploit
Kitploit•added 2026/09/29 2:11 a.m.•16 views

CVE-2021-40822

CVE-2021-40822 SSRF GeoServer 記事: https://gccybermonks.com/posts/cve-2021-40822/ ラボ: このリポジトリをクローン: git clone https://github.com/phor3nsic/CVE-2021-40822.git ラボを起動: cd CVE-2021-40822 && docker-compose up このターゲットが脆弱かどうかを確認: python3 CVE-2021-40822.py -u http://localhost:8090/...

7.5CVSS7.7AI score0.19259EPSS
SaveExploits0
Kitploit
Kitploit•added 2026/09/28 8:08 p.m.•15 views

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364: Apache CXF MTOM XOP:Include SSRFからLFIへのエクスプロイト ⚠️ 免責事項 このツールは教育目的および許可されたセキュリティテスト専用です...

9.8CVSS7.1AI score0.02232EPSS
SaveExploits6References1
OSV
OSV•added 2026/09/28 4:43 p.m.•10 views

GO-2026-6522 Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot

Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot...

8.3CVSS5.9AI score0.00243EPSS
SaveExploits0References2
Kitploit
Kitploit•added 2026/09/28 4:41 p.m.•16 views

CVE-2024-5736

CVE-2024-5736 AdmirorFrames Joomla! Extension 5.0 - サーバーサイドリクエストフォージェリ タイムライン ベンダーへの脆弱性報告: 26.01.2024 修正版 5.0 のリリース: 06.06.2024 公開開示: 28.06.2024 説明 AdmirorFrames Joomla! Extension の afGdStream.php ファイルにおけるサーバーサイドリクエストフォージェリ。このファイルでは、$GET'srcfile' 変数の値を imagecreatefrompng 関数のパラメータとして直接使用しています。...

8.2CVSS6.2AI score0.01515EPSS
SaveExploits3References1
Kitploit
Kitploit•added 2026/09/28 10:03 a.m.•15 views

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - 未認証のサーバーサイドリクエストフォージェリ 説明 WordPress用プラグイン「Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for...

7.2CVSS7.9AI score0.05513EPSS
SaveExploits1
Kitploit
Kitploit•added 2026/09/28 10:00 a.m.•28 views

security-research

セキュリティリサーチ Apache Software Foundation に報告し、ASF セキュリティプロセスを通じて開示された脆弱性。15 プロジェクトにわたる 46 件の CVE 、2023 年から 2026 年。 公開された再現コードが存在する場合はリンクしている。いずれも問題を実証し、修正したリリースを明示する、最小限で自己完結したプロジェクトである。 25 種類の異なる CWE にわたり、2 つのクラスが支配的である: 信頼できないデータのデシリアライズ 7 件 と サーバーサイドリクエストフォージェリ 7 件。 Apache エコシステム全体: 16 件の CVE、14...

9.8CVSS6.2AI score0.02631EPSS
SaveExploits7References4
Kitploit
Kitploit•added 2026/09/28 9:11 a.m.•14 views

CVE-2026-20230

CVE-2026-20230 - Cisco Unified CM ⚡ 簡単な使い方 このプロジェクトは、以下のような安全で許可された環境でのみ使用してください： ローカル仮想マシン Docker コンテナ 隔離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例： git clone https://github.com/HORKimhab/CVE-2025-46822 cd CVE-2025-46822 python -m venv venv Mac/Linux source venv/bin/activate Window WSL/Git bash source...

8.6CVSS8.4AI score0.882EPSS
SaveExploits3References1
OSV
OSV•added 2026/09/28 7:46 a.m.•5 views

CVE-2026-82375 Apache Roller: Server-side request forgery via entry trackback and enclosure URLs

Server-Side Request Forgery SSRF in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a weblog to cause outbound HTTP requests to attacker-chosen destinations through legacy outbound Trackback and entry enclosure handling. The Trackback control is hidden in the standar...

7.4CVSS5.8AI score
SaveExploits0References6
EUVD
EUVD•added 2026/09/28 6:00 a.m.•7 views

EUVD-2026-88093

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is n...

7.5CVSS6.7AI score0.00298EPSS
SaveExploits0References8
CVE
CVE•added 2026/09/28 6:00 a.m.•15 views

CVE-2026-101005

A server-side request forgery (SSRF) vulnerability exists in October CMS versions up to 4.3.4 . The flaw is located in the validateExternalImageHost function within the System/Classes/ResizeImages.php file of the SSRF Protection component. An unauthenticated remote attacker can exploit this vulne...

7.5CVSS6.7AI score0.00298EPSS
SaveExploits0References8
OSV
OSV•added 2026/09/28 6:00 a.m.•6 views

CVE-2026-101005 October CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is n...

6.9CVSS5.2AI score
SaveExploits0References10
Vulnrichment
Vulnrichment•added 2026/09/28 6:00 a.m.•9 views

CVE-2026-101005 October CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is n...

7.5CVSS5.3AI score0.00298EPSS
SaveExploits0References8
Cvelist
Cvelist•added 2026/09/28 6:00 a.m.•34 views

CVE-2026-101005 October CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is n...

7.5CVSS0.00298EPSS
SaveExploits0References8
NVD
NVD•added 2026/09/28 5:16 a.m.•11 views

CVE-2026-100909

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. The manipulation of the argument realSourcePath results in server-side request forgery. The attack may be performed...

7.5CVSS0.00298EPSS
SaveExploits0References8
Kitploit
Kitploit•added 2026/09/28 4:38 a.m.•14 views

CVE-2026-44578

🚨 CVE-2026-44578 — Next.js SSRF 脆弱性 📌 概要 CVE-2026-44578 は、セルフホスト型 Next.js アプリケーションに影響を与える 高深刻度のサーバーサイドリクエストフォージェリ SSRF 脆弱性です。 攻撃者は細工された WebSocket Upgrade リクエスト を悪用して、サーバーに内部または外部システムへのアウトバウンドリクエストを強制することができます。 ⚠️ 影響 この脆弱性により、攻撃者は以下にアクセスできる可能性があります： 対象| リスク ---|--- 🔐 内部API| 内部への不正アクセス ☁️...

8.6CVSS8.1AI score0.01895EPSS
SaveExploits11References1
CVE
CVE•added 2026/09/28 4:30 a.m.•20 views

CVE-2026-100909

A server-side request forgery (SSRF) vulnerability exists in OctoberCMS versions up to 4.1.19/4.2.25/4.3.4 . The flaw is located in the getSourcePathForResize function within the modules/system/classes/ResizeImages.php file, where the manipulation of the realSourcePath argument allows for remote ...

7.5CVSS6.5AI score0.00298EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment•added 2026/09/28 4:30 a.m.•10 views

CVE-2026-100909 OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. The manipulation of the argument realSourcePath results in server-side request forgery. The attack may be performed...

7.5CVSS6.5AI score0.00298EPSS
SaveExploits0References8
OSV
OSV•added 2026/09/28 4:30 a.m.•8 views

CVE-2026-100909 OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. The manipulation of the argument realSourcePath results in server-side request forgery. The attack may be performed...

6.9CVSS5AI score
SaveExploits0References10
Cvelist
Cvelist•added 2026/09/28 4:30 a.m.•33 views

CVE-2026-100909 OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. The manipulation of the argument realSourcePath results in server-side request forgery. The attack may be performed...

7.5CVSS0.00298EPSS
SaveExploits0References8
Rows per page
Query Builder