Lucene search
+L

14174 matches found

CVE
CVE
added 2026/09/16 6:00 a.m.12 views

CVE-2026-76559

CVE-2026-76559 is a Server-Side Request Forgery (SSRF) in the WP Import Export Lite WordPress plugin, affecting versions before 3.9.33 . The root cause is improper URL validation during the import process, which allows users with the import capability (held by administrators by default ) to make ...

4.1CVSS5.6AI score0.00286EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 6:00 a.m.8 views

EUVD-2026-80183

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability, which administrators hold by default, to make the site issue requests to internal hosts and services and read their...

5.6AI score0.00286EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/16 6:00 a.m.7 views

WordPress WP Import Export Lite plugin < 3.9.33 - Admin+ SSRF vulnerability

Admin+ SSRF vulnerability discovered by Yassin Mohamed in WordPress Plugin WP Import Export Lite versions 3.9.33...

4.1CVSS0.00286EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/16 5:57 a.m.5 views

apache-vulnerability-testing

Apache HTTP Server 脆弱性テストツール このリポジトリは、Apache HTTP Server のさまざまな脆弱性(ファイル名混乱攻撃、SSRF、サービス拒否、および最近のCVEに関連するその他の脆弱性)をテストするための Proof of Concept PoC を提供します。このツールは、サーバーが特定の種類の攻撃に対して脆弱かどうかを評価するために、細工されたHTTPリクエストを送信します。 特徴 複数の脆弱性をテストします。以下を含みます: CVE-2024-38472 : Windows上のApache HTTP ServerにおけるUNC SSRF...

9.8CVSS7.4AI score0.99957EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/16 5:13 a.m.10 views

cve-2021-29447_auto-script

CVE-2021-29447: WordPress Media Library XXE Vulnerability This repository details the CVE-2021-29447 vulnerability, a critical security flaw in WordPress that allowed for authenticated XML External Entity XXE attacks through the Media Library. It also provides an automatic script that demonstrate...

7.1CVSS6.9AI score0.85719EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/16 5:13 a.m.10 views

CVE-2025-63571

Description During analysis of the AI ​​system ChatGPT GPT-5, a Server-Side Request Forgery SSRF vulnerability was discovered. This issue occurs because the application automatically fetches and executes external URLs submitted by users e.g., webhooks without any validation or sanitization. By...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 5:04 a.m.9 views

CVE-2023-49471

CVE-2023-49471 Vulnerability Type Blind SSRF Affected Product and Version Bar assistant / -----------------------------8290129562507108753887567115 Content-Disposition: form-data; name="images0copyright" ------------------------...

8.8CVSS8.1AI score0.0113EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 4:53 a.m.4 views

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit ProxyShell/ProxyLogon, another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations...

9.8CVSS8.2AI score0.99996EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/09/16 4:32 a.m.8 views

CVE-2025-4123-Exploit-Tool-Grafana-

CVE-2025-4123 - Grafana Path Traversal Exploit Developed by mitsec This is a proof-of-concept PoC exploit tool for CVE-2025-4123 , a critical path traversal vulnerability in Grafana's /public endpoint. The exploit allows for: ✅ Server-Side Request Forgery SSRF ✅ Local File Inclusion LFI ✅ Open...

7.6CVSS8AI score0.97007EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/16 4:20 a.m.13 views

CVE-2026-67620-poc

CVE-2026-67620 — Flowise SSRF via incomplete cloud-metadata deny-list Oracle OCI + Alibaba Cloud Product: FlowiseAI/Flowise — visual LLM / AI-agent builder 54k ★ Affected versions: ≤ 3.1.4 — confirmed still vulnerable in 3.1.4 , the latest release re-verified 2026-08-06 Vulnerability: Server-Side...

7.7CVSS5.9AI score0.0032EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/16 3:13 a.m.10 views

learnjavabug

Este proyecto es solo para investigación de seguridad. Se prohíbe usar este proyecto para lanzar ataques ilegales. El usuario es responsable de las consecuencias. Este es un proyecto personal para reproducir y publicar algunas vulnerabilidades interesantes o de gran impacto. No tiene mucho...

7.2AI score
SaveExploits0
NVD
NVD
added 2026/09/16 2:17 a.m.8 views

CVE-2026-92215

A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agentsdks/python/a2uiagent/src/a2ui/extensions/fileresolve/fileresolver.py of the component FileResolver. The manipulation leads to server-side request forgery. I...

7.5CVSS0.0038EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/16 1:36 a.m.9 views

CVE-2026-73315

CVE-2026-73315: SSRF through PayPal certificate URL XenForo before 2.3.13 fetches the certificate URL supplied by a PayPal REST webhook without restricting its destination. What happens The callback handler passes PAYPAL-CERT-URL to XenForo's trusted HTTP reader. It does not require a PayPal...

8.6CVSS6AI score0.00272EPSS
SaveExploits2
Cvelist
Cvelist
added 2026/09/16 1:30 a.m.36 views

CVE-2026-92215 a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery

A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agentsdks/python/a2uiagent/src/a2ui/extensions/fileresolve/fileresolver.py of the component FileResolver. The manipulation leads to server-side request forgery. I...

7.5CVSS0.0038EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/16 1:30 a.m.5 views

CVE-2026-92215 a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery

A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agentsdks/python/a2uiagent/src/a2ui/extensions/fileresolve/fileresolver.py of the component FileResolver. The manipulation leads to server-side request forgery. I...

6.9CVSS
SaveExploits0References10
CVE
CVE
added 2026/09/16 1:30 a.m.19 views

CVE-2026-92215

CVE-2026-92215 affects a2ui-project a2ui versions up to 0.10.7 . The vulnerability is a Server-Side Request Forgery (SSRF) in the FileResolver component, specifically in the httpx.get function within the file agent_sdks/python/a2ui_agent/src/a2ui/extensions/file_resolve/file_resolver.py. An unaut...

7.5CVSS6.6AI score0.0038EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/16 1:21 a.m.12 views

cve-2024-56800-poc

cve-2024-56800 POC Reference https://nvd.nist.gov/vuln/detail/CVE-2024-56800 https://github.com/firecrawl/firecrawl/commit/4d1f92f4c8c36403022428285a03621fd90d62ec https://github.com/firecrawl/firecrawl/security/advisories/GHSA-vjp8-2wgg-p734 Vulnerability Firecrawl is a web scraper that allows...

7.4CVSS5.7AI score0.00346EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 1:16 a.m.12 views

CVE-2024-39713

CVE-2024-39713: Rocket.Chat SSRF PoC Description A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. Links: https://nvd.nist.gov/vuln/detail/CVE-2024-39713 https://hackerone.com/reports/1886954 Usage root@kitploit: pip install -r requirements.tx...

8.6CVSS8.1AI score0.03201EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 12:46 a.m.8 views

CVE-2026-64849.yaml

id: CVE-2026-64849 info: name: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass author: DhiyaneshDk severity: critical description: | MLflow 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach interna...

9.3CVSS8.1AI score0.1641EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/16 12:43 a.m.8 views

Blackash-CVE-2025-66516

🚨 CVE-2025-66516 — Critical Apache Tika Vulnerability CVSS: 10.0 | Exploit Type: XXE Injection | Risk Level: MAXIMUM 🎯 Executive Summary CVE-2025-66516 is a critical XML External Entity XXE vulnerability in Apache Tika’s core processing engine. A single malicious PDF with XFA content can trigger:...

9.8CVSS8AI score0.87688EPSS
SaveExploits6
Rows per page
Query Builder