CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ Overview CVE-2026-16723 is a Remote Code Execution RCE vulnerability in Fastjson 1.x 1.2.68 – 1.2.83. When Fastjson parses attacker-controlled JSON, a crafted @type value is turned into a class-resource lookup inside...

CVE-2024-51358

CVE-2024-51358: SSRF in Heimdall application A server-side request forgery SSRF vulnerability was discovered in Heimdall version 2.6.1, specifically within the Add Application feature. This flaw allows remote attackers to perform HTTP requests. References: Heimdall GitHub repository:...

Exploit_CVE-2023-27163

CVE-2023-27163 PoC Exploit Code This Python script is a Proof of Concept PoC for CVE-2023-27163 , a Server-Side Request Forgery SSRF vulnerability in Request Basket. Code Description The script automates the exploitation of CVE-2023-27163. It performs the following actions: 1. Generates a random...

CVE-2023-27163-AND-Mailtrail-v0.53

Automatic Exploit Summary The following exploit abuses Requests Baskets v1.2.1 SSRF vulnerability to forward the internal application running at 127.0.0.1:80 to the external application at /pwned. Once the Mailtrail v0.53 application has been forwarded it will execute a reverse shell command...

Solr-SSRF

Solr-SSRF Apache Solr SSRF Usage - Apache Solr SSRF vulnerability CVE-2021-27905 - Options: root@kitploit: -h or --help : Description -u or --url : Site URL address -d or --dnslog : DnsLog Example python3 CVE-2021-27905.py -u URL -d dnslog...

Apache-Authentication-Flaw-Research-CVE-2024-38476-

🛡️ Apache Authentication Flaw Research CVE-2024-38476 Prepared By: Abanoub Ehab 🛡️ Huawei Telecommunications Student Club - AOU A comprehensive technical research paper on the semantic ambiguity vulnerability in Apache HTTP Server and its impact on backend response handling. 📝 Abstract...

CVE-2025-26240

CVE-2025-26240 This is proof of concept code for exploitation of the pdfkit fromstring method. It contains simple payload demonstrating both LFI and SSRF...

CVE-2026-5530

CVE-2026-5530 通过 OCI 注册表重定向实现 Ollama SSRF，并完整外泄响应数据。 技术文章：https://davidrochester.com/posts/cve-2026-5530 披露 已多次联系 Ollama，但均未收到回复。 用法 三种模式：枚举（enum）、外泄（exfil）和探测（probe）。 枚举 发现可从 Ollama 主机访问的内部存活端点。 root@kitploit: python3 poc.py targets.txt --registry-host 外泄 在已知响应大小的情况下，外泄 SSRF 响应。 root@kitploit:...

CVE-2021-40438

CVE-2021-40438 Requesting a uri-path can cause modproxy to forward the request to an origin server selected by a remote user. This issue affects Apache HTTP Server 2.4.48 and earlier versions. Attackers can exploit this vulnerability by crafting a request with a uri-path, which causes modproxy to...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in axios (CVE-2025-62718)

Summary IBM Db2 Developer Extension is affected by vulnerability in axios CVE-2025-62718 Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization whe...

swagger-ui

Introduction: The Role of Swagger UI Swagger UI is a widely used library that renders OpenAPI formerly Swagger specifications into an interactive web interface. It enables developers and integrators to explore and test APIs without having the backend implementation in place. CVE‑2018‑25031 Detail...

CVE-2026-62201-OpenClaw-SSRF

CVE-2026-62201 — OpenClaw 沙箱 Exec-Server 网络策略绕过（SSRF） 严重性： 高 · CVSS： 7.7（CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N）· CWE-918（服务端请求伪造） 漏洞概览 字段| 值 ---|--- 安全公告| GHSA-mgvr-6gvw-3rgr NVD| CVE-2026-62201 产品| OpenClaw（npm 包 openclaw）— 沙箱 exec-server 组件 受影响版本| openclaw 2026.6.6 已修复版本| 2026.6.6 及更高版本...

CVE-2026-76559

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability, which administrators hold by default, to make the site issue requests to internal hosts and services and read their...

CVE-2026-12944

CVE-2026-12944 Langflow 1.10.0 urllib SSRF Langflow OSS ≤ 1.10.0 — 通过 urllib.request / socket 实现自定义组件代码执行。组件扫描器的拒绝列表遗漏了这些标准库模块。IBM 已在 1.10.1 中修复。 IBM 将其评为 PR:L 。执行汇聚点是 POST /api/v1/customcomponent，该调用需要会话 cookie / bearer token。本 PoC 获取方式如下： 1. --test 不进行身份验证。 它仅执行 GET /api/v1/version（外加一次连通性 GET...

CVE-2026-76559

CVE-2026-76559 is a Server-Side Request Forgery (SSRF) in the WP Import Export Lite WordPress plugin, affecting versions before 3.9.33 . The root cause is improper URL validation during the import process, which allows users with the import capability (held by administrators by default ) to make ...

EUVD-2026-80183

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability, which administrators hold by default, to make the site issue requests to internal hosts and services and read their...

WordPress WP Import Export Lite plugin < 3.9.33 - Admin+ SSRF vulnerability

Admin+ SSRF vulnerability discovered by Yassin Mohamed in WordPress Plugin WP Import Export Lite versions 3.9.33...

apache-vulnerability-testing

Apache HTTP Server 脆弱性テストツール このリポジトリは、Apache HTTP Server のさまざまな脆弱性（ファイル名混乱攻撃、SSRF、サービス拒否、および最近のCVEに関連するその他の脆弱性）をテストするための Proof of Concept PoC を提供します。このツールは、サーバーが特定の種類の攻撃に対して脆弱かどうかを評価するために、細工されたHTTPリクエストを送信します。 特徴 複数の脆弱性をテストします。以下を含みます： CVE-2024-38472 : Windows上のApache HTTP ServerにおけるUNC SSRF...

cve-2021-29447_auto-script

CVE-2021-29447: WordPress Media Library XXE Vulnerability This repository details the CVE-2021-29447 vulnerability, a critical security flaw in WordPress that allowed for authenticated XML External Entity XXE attacks through the Media Library. It also provides an automatic script that demonstrate...

CVE-2025-63571

Description During analysis of the AI ​​system ChatGPT GPT-5, a Server-Side Request Forgery SSRF vulnerability was discovered. This issue occurs because the application automatically fetches and executes external URLs submitted by users e.g., webhooks without any validation or sanitization. By...