Lucene search
+L

15229 matches found

Kitploit
Kitploit
added 2026/09/15 10:33 p.m.8 views

cve-2023-27163

Thank you to @beet1ehttps://github.com/b33t1e from Shanghai Jiao Tong University and @chenlibo147 , @houqinsheng, [email protected] from Shandong University. Please review https://notes.sjtu.edu.cn/s/MUUhEymt7 for indepth information about the SSRF vulnerability CVE-2023-27163. This code is...

6.5CVSS6.6AI score0.06591EPSS
SaveExploits29References1
Kitploit
Kitploit
added 2026/09/15 10:33 p.m.12 views

Havoc-C2-SSRF-to-RCE

Havoc-C2-SSRF-to-RCE This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remotely to a target due to multiple vulnerabilities in Havoc C2 Framework...

9.8CVSS6.1AI score0.02909EPSS
SaveExploits6References4
Kitploit
Kitploit
added 2026/09/15 9:21 p.m.9 views

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 Server Side Request Forgery vulnerability in SAP NetWeaver Development Infrastructure root@kitploit: Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...

9.9CVSS8.2AI score0.69075EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 9:16 p.m.9 views

CVE-2026-61559

@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable ENABLEDYNAMICAPIURL=true is set, the server reads the X-GitLab-API-URL HTTP request header and uses it as the base URL for all outbound GitLab A...

9.6CVSS0.00271EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/15 9:16 p.m.10 views

CVE-2026-54544

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...

7.2CVSS0.0032EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/15 8:58 p.m.9 views

CVE-2026-61559 @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable ENABLEDYNAMICAPIURL=true is set, the server reads the X-GitLab-API-URL HTTP request header and uses it as the base URL for all outbound GitLab A...

9.6CVSS5.7AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/15 8:58 p.m.32 views

CVE-2026-61559 @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable ENABLEDYNAMICAPIURL=true is set, the server reads the X-GitLab-API-URL HTTP request header and uses it as the base URL for all outbound GitLab A...

9.6CVSS0.00271EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/09/15 8:58 p.m.8 views

CVE-2026-61559 @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable ENABLEDYNAMICAPIURL=true is set, the server reads the X-GitLab-API-URL HTTP request header and uses it as the base URL for all outbound GitLab A...

9.6CVSS5.8AI score0.00271EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/15 8:58 p.m.38 views

CVE-2026-61559

@zereight/mcp-gitlab (a Model Context Protocol server for GitLab) is vulnerable to Server-Side Request Forgery in versions 0.0.1 through

9.6CVSS5.7AI score0.00271EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/15 8:58 p.m.10 views

EUVD-2026-80004

@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable ENABLEDYNAMICAPIURL=true is set, the server reads the X-GitLab-API-URL HTTP request header and uses it as the base URL for all outbound GitLab A...

9.6CVSS5.7AI score0.00271EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/09/15 8:57 p.m.13 views

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft Affected - Repository: zereight/gitlab-mcp - Affected versions: All versions through commit 74a8c83 - Patched versions: None at time of report Severity High. CVSS v3.1 8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Descripti...

9.6CVSS5.8AI score0.00271EPSS
SaveExploits0References5Affected Software1
Kitploit
Kitploit
added 2026/09/15 8:40 p.m.9 views

jira-ssrf

jira-ssrf CVE-2017-9506 The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SS...

6.1CVSS6.5AI score0.71601EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 8:38 p.m.11 views

Grafana-cve-2025-4123

Grafana-cve-2025-4123 Result root@kitploit: FOFA app="Grafana" Shodan product:"Grafana Open Source" SSRF root@kitploit: http://localhost:3000/render/public/..%252f%255COpenRedirectURL%252f%253F%252f..%252f.. Open Redirect root@kitploit: /public/..%2F%5cwebsite.com%2F%3f%2F..%2F...

7.6CVSS8AI score0.97007EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/15 8:35 p.m.9 views

ssrfnginx

ssrfnginx...

5.3AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/09/15 8:27 p.m.9 views

CVE-2026-54544 Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...

7.2CVSS5.9AI score0.0032EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/15 8:27 p.m.15 views

CVE-2026-54544

Fireshare , a self-hosted media and link sharing platform, contains an unauthenticated SSRF vulnerability prior to version 1.6.16 . Two API endpoints—POST /api/test-discord-webhook and POST /api/test-webhook—are missing the @login_required decorator, allowing an attacker to trigger arbitrary outb...

7.2CVSS5.8AI score0.0032EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/15 8:27 p.m.6 views

CVE-2026-54544 Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...

7.2CVSS5.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/15 8:27 p.m.28 views

CVE-2026-54544 Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...

7.2CVSS0.0032EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/15 8:17 p.m.8 views

CVE-2026-76820

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

7.7CVSS0.00304EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/15 8:17 p.m.8 views

CVE-2026-76680

Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery SSRF attacks. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WA...

8.5CVSS0.00262EPSS
SaveExploits0References1
Rows per page
Query Builder