CVE-2024-37818

Strapi v4.24.4 is affected by a Server-Side Request Forgery (SSRF) through the /strapi.io/_next/image endpoint. The issue allows an attacker to scan internal ports or access sensitive information via a crafted GET request. Root cause cited across sources as improper URL parameter handling in the ...

Cortex Unshortenlink Analyzer < 1.1 - Server-Side Request Forgery Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Cortex Unshortenlink Analyzer 1.1 - Server-Side Request Forgery Exploit Author: Alexandre Basquin Vendor Homepage: https://blog.thehive-project.org Software Link: https://github.com/TheHive-Project/Cortex Version: Cortex =...