CVE-2026-46457

CVE-2026-46457 — camel-nats Inbound Header Injection SSRF Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

CVE-2026-40564

CVE-2026-40564: SSRF tramite FlinkSessionJob.spec.job.jarURI in flink-kubernetes-operator L'Apache Flink Kubernetes Operator non controlla il campo spec.job.jarURI nelle risorse FlinkSessionJob o FlinkDeployment. Chiunque possa creare una di queste risorse può impostare jarURI su un URL qualsiasi...

CVE-2021-21311

CVE-2021-21311 Descrizione SSRF Server-side Request Forgery in Adminer Strumento Open Source per la gestione di database dalla v4.0.0 v4.7.8 corretta in v4.7.9 Commit della patch Utilizzo root@kitploit: exploit.py -h -target TARGET -redirect REDIRECT -host HOST -port PORT options: -h, --help show...

CVE-2026-75871 Server-Side Request Forgery (SSRF) in GitLab AI Gateway

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an...

CVE-2026-75871

GitLab AI Gateway is affected by a Server-Side Request Forgery (SSRF) vulnerability (classified in the CVE title) across versions 18.10–19.0.12, 19.1–19.1.7, and 19.2–19.2.2 . An authenticated user with Duo Agent Platform access can craft an inline flow configuration that overrides the HTTP Host ...

EUVD-2026-67087

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.9.0 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect model requests to an...

CVE-2026-19889 Server-Side Request Forgery (SSRF) in GitLab AI Gateway

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.9.0 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect model requests to an...

CVE-2026-19889

CVE-2026-19889 is a Server-Side Request Forgery (SSRF) vulnerability in the GitLab AI Gateway component, affecting versions 18.9.0 through 19.0.12 , 19.1 through 19.1.7 , and 19.2 through 19.2.2 . An authenticated user with Duo Agent Platform access could redirect model requests to an externally-...

CVE-2022-36804-PoC

CVE-2022-36804-PoC Multithreaded Exploit-Skript für CVE-2022-36804, das die meisten BitBucket-Versionen 8.3.1 betrifft. Das vollständige Advisory finden Sie hier https://jira.atlassian.com/browse/BSERV-13438 Alle Anerkennung für die Entdeckung gebührt TheGrandPew Das Skript erkennt automatisch...

extended-ssrf-search

Erweiterte ssrf-Suche Dieses Tool sucht nach SSRF unter Verwendung vordefinierter Einstellungen in verschiedenen Teilen einer Anfrage Pfad, Host, Header, POST- und GET-Parameter. Erster Schritt Benennen Sie example.app-settings.conf in app-settings.conf um und passen Sie die Einstellungen an. Die...

SSRF-CVE-2018-25031-

Questo repository non contiene un README...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Ultima Plugin SSRF per Burp che automatizza il rilevamento di SSRF in tutte le richieste. Se incontri problemi o desideri una nuova funzionalità non elencata di seguito Crea una nuova issue qui sotto in questo modulo Crea una nuova issue Checklist delle funzionalità future ✔️...

CVE-2021-40438-POC

Nota: Inteso esclusivamente per scopi educativi e test controllati. Testare solo su sistemi per cui si ha l'autorizzazione. CVE-2021-40438 - SSRF Exploit root@kitploit: ░█▀▀░█░█░█▀▀░░░░░▀▀▄░▄▀▄░▀▀▄░▀█░░░░░░█░█░▄▀▄░█░█░▀▀█░▄▀▄ ░█░░░▀▄▀░█▀▀░▄▄▄░▄▀░░█/█░▄▀░░░█░░▄▄▄░░▀█░█/█░░▀█░░▀▄░▄▀▄...

CVE-2021-21975

CVE-2021-21975 VMware vRealize Operations Manager API Server Side Request Forgery SSRF vRealize Operations vROps è uno strumento che offre una gestione autonoma delle operazioni IT basata sull'intelligenza artificiale, dalle applicazioni all'infrastruttura, per ottimizzare, pianificare e scalare ...

CVE-2016-4014

CVE-2016-4014 SAP Netweaver JAVA AS UDDI Komponente XXE root@kitploit: POST /uddi/api/replication HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Type:...

CVE-2026-81678 AVideo SSRF Guard Bypass via IPv6 Transition Addresses

AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...

CVE-2026-81678

AVideo versions prior to 24.0 contain a server-side request forgery (SSRF) vulnerability in the isSSRFSafeURL function. The flaw is that this function fails to extract embedded IPv4 addresses when they are encoded within NAT64 , 6to4 , and Teredo IPv6 transition address formats. Unauthenticated a...

EUVD-2026-67148

The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/gethtmlskeleton.ts validated the url argument with isValidHttpUrl from src/utils/generic.ts, which confirmed the string began with an http or https scheme and parsed as a U...

CVE-2026-81091

CVE-2026-81091 is a Server-Side Request Forgery (SSRF) in the proxy middleware of mcp-use's inspector . The vulnerable function mountMcpProxy (in libraries/typescript/packages/inspector/src/server/proxy/mcp-proxy.ts) read the target URL from the X-Target-URL header or __mcp_target parameter and f...

EUVD-2026-67146

The proxy middleware in mcp-use's inspector forwards requests to a destination the caller names. mountMcpProxy in libraries/typescript/packages/inspector/src/server/proxy/mcp-proxy.ts read the target from the X-Target-URL header or the mcptarget parameter and proxied to it without inspecting the...