Lucene search
+L

12827 matches found

Kitploit
Kitploit
added 2026/08/30 1:36 p.m.6 views

extended-ssrf-search

Extended ssrf search This tool search for SSRF using predefined settings in different parts of a request path, host, headers, post and get parameters. First step Rename example.app-settings.conf to app-settings.conf and adjust settings. The most important setting is the callback url. I recommend ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 1:09 p.m.2 views

CVE-2022-3590-WordPress-Vulnerability-Scanner

CVE-2022-3590 WordPress Vulnerability Scanner This Python script is designed to check whether a WordPress website is vulnerable to the CVE-2022-3590 vulnerability. The vulnerability exploits an unauthenticated blind Server-Side Request Forgery SSRF in the pingback feature of WordPress. Getting...

5.9CVSS6.2AI score0.0315EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/30 12:31 p.m.5 views

CVE-2021-22214

CVE-2021-22214 Description - POC for CVE-2021-22214: Gitlab CI Lint API未授权 SSRF漏洞 - create by antx at 2021-11-01. Detail - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was...

8.6CVSS7.4AI score0.27806EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/30 12:23 p.m.5 views

CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - Unauthenticated SSRF Description Fusion Builder is a WordPress plugin that allows users to create and edit pages using a drag-and-drop interface. It is vulnerable to an unauthenticated SSRF that allows an attacker to read any file on the server. Proof of...

9.8CVSS7.3AI score0.72076EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/30 12:03 p.m.3 views

Cerberus

Cerberus A powerful vulnerability scanner. Subdomain enumeration uses aioDNS with asyncio for asynchronous fast scanning. It covers the target's full asset scope for batch vulnerability scanning, middleware information collection, automatic proxy IP collection, and automatically uses proxy IPs to...

9.8CVSS5.9AI score0.9835EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/08/30 12:00 p.m.31 views

surf

Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 11:33 a.m.5 views

Keycloak-12.0.1-CVE-2020-10770

Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requesturi ' Blind Server-Side Request Forgery SSRF Unauthenticated Exploit-DB-50405 Expected outcome: Port scan of localhost or internally accessible hosts. Intended only for educational and testing in corporate environments. This Exploit was...

5.3CVSS6.3AI score0.69724EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/30 10:49 a.m.3 views

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...

9.8CVSS6AI score0.02909EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/30 10:00 a.m.4 views

CVE-2024-27564

CVE-2024-27564 Description: A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This SSRF vulnerability can be exploited without authentication, making it particularly dangerous. The vulnerable code is in the...

6.5CVSS7.1AI score0.40637EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/30 8:43 a.m.6 views

IMDShift

IMDShift AWS workloads that rely on the metadata endpoint are vulnerable to Server-Side Request Forgery SSRF attacks. IMDShift automates the migration process of all workloads to IMDSv2 with extensive capabilities, which implements enhanced security measures to protect against these attacks...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 7:48 a.m.244 views

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/30 7:29 a.m.3 views

CVE-2021-21975

CVE-2021-21975 Nmap script to check vulnerability CVE-2021-21975 Vulnerability References: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html Blog...

7.5CVSS7.2AI score0.7829EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/30 7:22 a.m.4 views

CVE-2026-67620-poc

CVE-2026-67620 — Flowise SSRF via incomplete cloud-metadata deny-list Oracle OCI + Alibaba Cloud Product: FlowiseAI/Flowise — visual LLM / AI-agent builder 54k ★ Affected versions: ≤ 3.1.4 — confirmed still vulnerable in 3.1.4 , the latest release re-verified 2026-08-06 Vulnerability: Server-Side...

7.7CVSS5.9AI score0.00322EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/30 7:20 a.m.4 views

CVE-2019-8451

CVE-2019-8451 Jira Unauthenticated SSRF Vulnerability python usage python CVE-2019-8451.py http://www.jas502n.com:8080 root@kitploit: root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...

6.5CVSS6.8AI score0.94453EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/30 7:12 a.m.3 views

CVE-2022-40146_Exploit_Jar

Apache Batik SSRF to RCE Jar Exploit Component link https://github.com/apache/xmlgraphics-batik Blog https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading Usage Modify the line 11 in...

7.5CVSS7AI score0.06256EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/30 6:10 a.m.3 views

CVE-2021-26855-SSRF

CVE-2021-26855-SSRF-Poc This script helps to identify CVE-2021-26855 ssrf Poc Reference: https://proxylogon.com/ Script usage python CVE-2021-26855.py -H target.com -B xxxxxxxxxxxxxxxxxx.burpcollaborator.net If you are able to retrieve tokens through HTTPS request. then the target is vulnerable...

9.8CVSS7.2AI score0.99996EPSS
SaveExploits65
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.190 views

SAP NetWeaver Development Infrastructure - Server Side Request Forgery

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...

9.9CVSS7.2AI score0.69075EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.308 views

ChatGPT个人专用版 - Server Side Request Forgery

A Server-Side Request Forgery SSRF in pictureproxy.php of ChatGPT commit f9f4bbc allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the urlparameter. id: CVE-2024-27564 info: name: ChatGPT个人专用版 - Server Side Request Forgery author: DhiyaneshDK...

6.5CVSS7AI score0.40637EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.79 views

WordPress Canto 1.3.0 - Blind Server-Side Request Forgery

WordPress Canto plugin 1.3.0 is susceptible to blind server-side request forgery. An attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized administrative...

5.3CVSS6.2AI score0.27771EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.69 views

Canvas LMS v2020-07-29 - Blind Server-Side Request Forgery

Canvas version 2020-07-29 is susceptible to blind server-side request forgery. An attacker can cause Canvas to perform HTTP GET requests to arbitrary domains and thus potentially access sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-5775 info: name: Canva...

5.8CVSS6.4AI score0.06531EPSS
SaveExploits1References4
Rows per page
Query Builder