CVE-2024-37818

Strapi v4.24.4 is vulnerable to a Server-Side Request Forgery (SSRF) due to improper URL parameter validation within the /strapi.io/_next/image component. An attacker could exploit this by sending a crafted GET request to scan for open ports or access sensitive internal information. While the Str...

Cortex Unshortenlink Analyzer < 1.1 - Server-Side Request Forgery Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Cortex Unshortenlink Analyzer 1.1 - Server-Side Request Forgery Exploit Author: Alexandre Basquin Vendor Homepage: https://blog.thehive-project.org Software Link: https://github.com/TheHive-Project/Cortex Version: Cortex =...