Web-Security-Learning

Web-Security-Learning Repository: https://github.com/CHYbeta/Web-Security-Learning Knowledge Planet Vulnerability Attack and Defense: https://t.zsxq.com/mm2zBeq Table of Contents: Web-Security-Learning Web Security SQL Injection MySQL MSSQL PostgreSQL MongoDB Techniques Tools XSS CSRF Other...

CVE-2026-105438

A Server-Side Request Forgery (SSRF) vulnerability exists in O2OA versions up to 10.0.1-ce . The flaw is located in the General Module within the function ActionUploadExcelWithUrl at the file path /x_general_assemble_control/jaxrs/excel/upload/with/url. An attacker can achieve SSRF by manipulatin...

CVE-2026-105438 O2OA General url ActionUploadExcelWithUrl server-side request forgery

A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /xgeneralassemblecontrol/jaxrs/excel/upload/with/url of the component General Module. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack...

CVE-2026-105438 O2OA General url ActionUploadExcelWithUrl server-side request forgery

A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /xgeneralassemblecontrol/jaxrs/excel/upload/with/url of the component General Module. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack...

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364: Apache CXF MTOM XOP:Include SSRF to LFI Exploit ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This proof-of-concept exploit is provided for educational purposes to help security professionals understand the vulnerability and protect their systems...

CVE-2026-102777

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

CVE-2024-5736

CVE-2024-5736 AdmirorFrames Extensión de Joomla! 5.0 - Falsificación de Solicitud del Lado del Servidor Server-Side Request Forgery Cronología Vulnerabilidad reportada al proveedor: 26.01.2024 Nueva versión corregida 5.0 lanzada: 06.06.2024 Divulgación pública: 28.06.2024 Descripción Falsificació...

CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

CVE-2019-8451

CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 http://host:port/plugins/servlet/gadgets/makeRequest?url=http://:@'.formathost, port, target https://host:port/plugins/servlet/gadgets/makeRequest?url=https://:@'.formathost, port, target...

CVE-2026-92931

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2026-92931

The @progress/sitefinity-nextjs-sdk npm package (versions 15.1.8326 through 15.4.8637 ) is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918). This flaw may allow a remote attacker to force the server to make requests to an attacker-controlled host , which could lead to the exposure of ...

CVE-2026-92931 CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2026-105290

The software feelec-yishu feelcrm-os version 1.0.0 is vulnerable to a server-side request forgery (SSRF) . The flaw exists within the getCurlData endpoint, specifically involving an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php. An attacker can remotely launch t...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - Unauthenticated Server-Side Request Forgery Description The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This...

security-research

Security Research Vulnerabilities I have reported to the Apache Software Foundation, disclosed through the ASF security process. 46 CVEs across 15 projects , 2023 to 2026. Where a public reproducer exists it is linked. Each one is a minimal, self-contained project that demonstrates the issue and...

CVE-2026-20230

CVE-2026-20230 - Cisco Unified CM ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone https://github.com/HORKimhab/CVE-2025-46822 cd...

CVE-2026-105263

Shaarli versions up to 0.16.3 are vulnerable to a server-side request forgery (SSRF) flaw in the Admin Metadata Endpoint . The root cause is located in the MetadataController function within the file application/front/controller/admin/MetadataController.php, where a manipulation of the url argume...

CVE-2026-105263 Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side request forgery

A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performing a manipulation of the argument url results in server-side...

CVE-2026-105238

The ChatGPTNextWeb NextChat software, version up to 2.16.1 , is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists within the proxyHandler function located in app/api/proxy.ts of the Proxy Fallback Handler component. Specifically, an attacker can manipulate the x-base-url argume...

CVE-2026-105238 ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...