CVE-2026-94401

MISP has a file-handling vulnerability that could let certain authenticated users make the server read files or access internal network services. When importing an XML file, MISP did not properly verify that the uploaded content was actually XML. Because of this, a user with permission to modify...

CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...

CVE-2019-7616

CVE-2019-7616 POC for CVE-2019-7616 / ESA-2019-09 - Blind SSRF This just a POC not a tool...

CVE-2026-94401 MISP Arbitrary Local File Read and SSRF via MISP Export Upload

MISP has a file-handling vulnerability that could let certain authenticated users make the server read files or access internal network services. When importing an XML file, MISP did not properly verify that the uploaded content was actually XML. Because of this, a user with permission to modify...

CVE-2026-94401

MISP versions below 2.5.47 contain an arbitrary local file read and SSRF vulnerability in the XML export/import upload functionality. The root cause is insufficient validation: MISP failed to verify that the uploaded content was actually XML, allowing an authenticated user with modify permissions...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF via URL Parser Differential Program Code Python root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed =...

SSRF-CVE-2023-22493

SSRF-CVE-2023-22493 Analysis of CVE-2023-22493...

f5_rce_poc

Uso root@kitploit: python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 El efecto es el siguiente: root@kitploit: python3 f5rce.py -u 127.0.0.1 --ssrf Después de ejecutar el comando, ingrese exit para salir PD: La salida no es lo suficientemente estética, lo modificaré 😁...

PoC-CVE-2025-26529

PoC para CVE-2025-26529 – Exploit de XSS a RCE en Moodle Esta es una Prueba de Concepto PoC que demuestra la cadena de vulnerabilidades SSRF a XSS → XSS a RCE en Moodle. Resumen He subido todos los archivos necesarios para demostrar la cadena completa de explotación: 1. SSRF a XSS 2. Capturando l...

Yasa-CVE-2023-46229

Yasa-CVE-2023-46229 Python exploit for CVE-2023-46229 with Yasa Project Introduction This project is a Python exploit script and experiment report for CVE-2023-46229, for learning and research purposes only. File Structure README.md: Project description document 丁云山YasaCVE202346229.pdf: Full...

CallStranger

CallStranger This script created by Yunus Çadırcı https://twitter.com/yunuscadirci to check against CallStranger CVE-2020-12695 vulnerability. An attacker can use this vulnerability for: Bypassing DLP for exfiltrating data Using millions of Internet-facing UPnP device as source of amplified...

westone-CVE-2021-21980-scanner

westone-CVE-2021-21980-scanner VMware vCenter earlier versions 7.0.2.00100 has unauthorized arbitrary file read + ssrf + xss vulnerability Installation & Usage git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2021-21980-scanner cmd CVE-2021-21980.exe...

CVE-2022-36663-PoC

CVE-2022-36663-PoC Escáner de red interna mediante blind SSRF en Gluu IAM Gluu IAM es vulnerable a blind SSRF, el cual puede ser explotado para escanear la red interna en busca de puertos abiertos dependiendo de los tiempos de respuesta. https://nvd.nist.gov/vuln/detail/CVE-2022-36663 Para...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...

CVE-2026-20230

CVE-2026-20230 - Cisco Unified CM ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone...

Leantime-POC

Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 Description The following vulnerabilities were identified in version 3.0.6 of the Leantime goals focused project management system. CVE-2024-27474 A cross-site request forgery CSRF vulnerability which, when triggered, would create and...

CVE-2026-33626-Lab

CVE-2026-33626 — LMDeploy Vision-Language SSRF Lab Overview This repository reproduces CVE-2026-33626 , a Server-Side Request Forgery SSRF vulnerability in LMDeploy's vision-language image loading path. The vulnerable behavior occurs when LMDeploy receives an image URL and the server-side image...

CVE-2022-1386

Description Fusion Builder is a WordPress plugin that allows users to create and edit pages using a drag-and-drop interface. It is vulnerable to an unauthenticated SSRF that allows an attacker to read any file on the server. Proof of Concept Request: root@kitploit: POST /wp-admin/admin-ajax.php...

CVE-2023-27163-exploit

CVE-2023-27163 — request-baskets SSRF Exploit I wrote this exploit to target CVE-2023-27163 , a Server-Side Request Forgery SSRF vulnerability found in request-baskets versions ≤ 1.2.1. The flaw lives in the /api/baskets/name endpoint, where the forwardurl parameter allows an attacker to make the...

CVE-2026-44578-next-js-ssrf

CVE-2026-44578 — Next.js WebSocket Upgrade SSRF Laboratorio Laboratorio autocontenido para reproducir la vulnerabilidad CVE-2026-44578 CWE-918, SSRF en aplicaciones Next.js self-hosted que usan el servidor Node.js integrado...