9781 matches found
CVE-2024-30531
CVE-2024-30531 is an SSRF issue in Nelio Content for WordPress. Affected: Nelio Content up to version 3.2.0. Descriptions in connected docs reference SSRF but do not provide concrete exploit details, root-cause analysis, or patch/version remediation beyond the affected range. No explicit exploit ...
CVE-2024-30531 WordPress Nelio Content plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Nelio Software Nelio Content.This issue affects Nelio Content: from n/a through 3.2.0...
CVE-2024-30532 WordPress Builderall Builder for WordPress plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Builderall Team Builderall Builder for WordPress.This issue affects Builderall Builder for WordPress: from n/a through 2.0.1...
CVE-2024-30532 WordPress Builderall Builder for WordPress plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Builderall Team Builderall Builder for WordPress.This issue affects Builderall Builder for WordPress: from n/a through 2.0.1...
CVE-2024-30532
CVE-2024-30532 is an unauthenticated SSRF in Builderall Builder for WordPress (WordPress plugin) affecting versions up to 2.0.1. It is addressed in later builds (e.g., 2.0.3 per associated advisories). CVSS 3.1 base score 4.9 (Medium). Remediation: upgrade to 2.0.3 or newer and re-test. Details f...
CVE-2024-24888
CVE-2024-24888 is a Server-Side Request Forgery (SSRF) in Gutenberg Blocks powered by Kadence Blocks. The vulnerability affects the Kadence Blocks Gutenberg Blocks plugin for WordPress, specifically versions up to 3.2.25. According to the connected Red Hat advisory, the flaw enables a server-side...
Exploit for Server-Side Request Forgery in Kubernetes Apiserver
CVE-2022-3172 demo Run poc.sh create...
PT-2024-2891
Name of the Vulnerable Software and Affected Versions Mobile Security Framework MobSF versions prior to 3.9.8 Description A Server-Side Request Forgery SSRF vulnerability exists in the firebase database check logic of the Mobile Security Framework MobSF. This allows an attacker to cause the serve...
PT-2024-23: Server-Side Request Forgery (SSRF) in Mobile Security Framework (MobSF)
The vulnerability was identified in Mobile Security Framework MobSF, versions =3.9.7. The discovered SSRF vulnerability in Firebase Database Check can be exploited by an attacker to make server connect to internal-only services. It is possible to make internal requests in case a malicious app is...
CVE-2024-25187
CVE-2024-25187 : A Server Side Request Forgery (SSRF) in 71cms v1.0.0 allows remote, unauthenticated attackers to disclose sensitive information via the getweather.html endpoint. Affected component is the getweather.html handling in 71cms v1.0.0; root cause details are not provided beyond the SSR...
PT-2024-5104
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.59 and earlier Description: The issue is related to a potential Server-Side Request Forgery SSRF in the mod rewrite module of the Apache HTTP Server. This allows an attacker to cause unsafe RewriteRules to...
Exploit for Server-Side Request Forgery in Anyscale Ray
PoC for a remote command execution vulnerability in Ray framew...
Server Side Request Forgery (SSRF)
gradio is vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to the /proxy route allowing users to proxy arbitrary URLs include potentially internal endpoints. Attackers can proxy arbitrary URLs by exploiting this vulnerability...
WordPress Nelio Content Plugin <= 3.2.0 is vulnerable to Server Side Request Forgery (SSRF)
Software Nelio Content Type Plugin Vulnerable versions = 3.2.0 Fixed in 3.2.1 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-30531 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID c9e8b5d11c70 Credits Majed...
WordPress Gutenberg Blocks by Kadence Blocks Plugin <= 3.2.25 is vulnerable to Server Side Request Forgery (SSRF)
Software Gutenberg Blocks by Kadence Blocks Type Plugin Vulnerable versions = 3.2.25 Fixed in 3.2.26 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-24888 Patch priority Low CVSS severity Low 6.4 Developer KadenceWP PSID ca4cec35c250...
CVE-2023-45705
An administrative user of WebReports may perform a Server Side Request Forgery SSRF exploit through SMTP configuration options...
CVE-2023-45705 HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)
An administrative user of WebReports may perform a Server Side Request Forgery SSRF exploit through SMTP configuration options...
CVE-2024-27775
SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery SSRF may allow exposing the local OS user's NTLMv2 hash...
CVE-2024-27775 SysAid - CWE-918: Server-Side Request Forgery (SSRF)
SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery SSRF may allow exposing the local OS user's NTLMv2 hash...