CVE-2022-26134

CVE-2022-26134 （CVE-2022-26134）認証不要でリモートから実行可能なOGNLインジェクションの脆弱性。Confluenceサーバーのコンテキストでコード実行を引き起こします。 必要環境：Python2 または Python3 使用法: python cve202226134.py -url targeturl -cmd "ls -al" python cve202226134.py -url targeturl -cmd "whoami" ターゲットがWindowsシステムの場合、以下のようにスクリプトを使用してください。例: python3...

CVE-2024-5736

CVE-2024-5736 AdmirorFrames Joomla! Extension 5.0 - サーバーサイドリクエストフォージェリ タイムライン ベンダーへの脆弱性報告: 26.01.2024 修正版 5.0 のリリース: 06.06.2024 公開開示: 28.06.2024 説明 AdmirorFrames Joomla! Extension の afGdStream.php ファイルにおけるサーバーサイドリクエストフォージェリ。このファイルでは、$GET'srcfile' 変数の値を imagecreatefrompng 関数のパラメータとして直接使用しています。...

CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-11710 DESCRIPTION: IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling...

react16-ssr

CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 用于复现 XSS 漏洞的简单 PoC 步骤 npm i npm run start 访问 localhost:3006...

CVE-2019-8451

CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 http://host:port/plugins/servlet/gadgets/makeRequest?url=http://:@'.formathost, port, target https://host:port/plugins/servlet/gadgets/makeRequest?url=https://:@'.formathost, port, target...

CVE-2026-92931

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 漏洞利用 iTop --debug exploit.rb light --debug exploit.rb -h | --help full：使用模拟浏览器执行 JavaScript，保留原始用户档案信息 light：仅解析 HTML 并发送请求，不执行 JavaScript，（破坏性）重置用户信息：电话、地点、职能 选项： 根 URL（基础路径），包括 HTTP 方案、端口和根文件夹 iTop 门户用户名 iTop 门户用户密码 要在目标上执行的命令 --debug 显示参数 -h, --help 显示此屏幕 示例：...

CVE-2026-92931

The @progress/sitefinity-nextjs-sdk npm package (versions 15.1.8326 through 15.4.8637 ) is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918). This flaw may allow a remote attacker to force the server to make requests to an attacker-controlled host , which could lead to the exposure of ...

CVE-2026-92931 CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

CVE-2026-92931 CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

Astra Linux – Vulnerability in configobj

All versions of the package configobj are vulnerable to Regular Expression Denial of Service ReDoS via the validate function, using .+?.. Note: This vulnerability can only be exploited by developers who place the offending values in server-side configuration files...

Astra Linux – Vulnerability in Apache2

A potential vulnerability in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly set up URLs to be handled by modproxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue...

Astra Linux – Vulnerability in Axis

UNSUPPORTED WHEN ASSIGNED When integrating Apache Axis 1.x in an application, it might not have been obvious that using “ServiceFactory.getService” could lead to potentially dangerous operations, such as LDAP queries. Passing untrusted input to this API method could expose the application to DoS,...

Astra Linux – Vulnerability in python-reportlab

All versions of the reportlab package are vulnerable to Server-side Request Forgery SSRF via img tags. To reduce this risk, use trustedSchemes and trustedHosts see Reportlab’s documentation. Steps to reproduce by Karan Bamal: 1. Download and install the latest version of the reportlab package. 2...

CVE-2026-105290

The software feelec-yishu feelcrm-os version 1.0.0 is vulnerable to a server-side request forgery (SSRF) . The flaw exists within the getCurlData endpoint, specifically involving an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php. An attacker can remotely launch t...

CVE-2026-105290 feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery

A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. It is...

CVE-2026-105290 feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery

A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. It is...

CVE-2026-38165-SSTI-

CVE-2026-38165 SSTI Velocity Server-Side Template Injection SSTI in XDocReport allows Remote Code Execution via Apache Velocity engine バグ定義 脆弱性の概要 Server-Side Template Injection（SSTI）は、CMSやWebフレームワークが使用するテンプレートに悪意のあるコードを注入し、リモートからの攻撃、機密情報の取得、またはシステムへの侵入活動を可能にするWebセキュリティ脆弱性です。...