CVE-2024-51132-POC

CVE-2024-51132-POC 漏洞类型 XXE - XML外部实体注入 。存在于 https://github.com/hapifhir/org.hl7.fhir.core/ 仓库中多个工件或模块的XXE漏洞可被进一步利用进行SSRF、信息泄露等。 受影响产品及版本 org.hl7.fhir.convertors 6.4.0 org.hl7.fhir.dstu2 6.4.0 org.hl7.fhir.dstu2016may 6.4.0 org.hl7.fhir.dstu3 6.4.0 org.hl7.fhir.r4 6.4.0 org.hl7.fhir.r4b 6.4.0...

CVE-2026-94028

A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.modeldump of the file mealie/routes/households/controllergrouprecipeactions.py of the component Recipe Action Trigger. Executing a manipulation of the argument url can lead to server-side reques...

EUVD-2026-83742

A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.modeldump of the file mealie/routes/households/controllergrouprecipeactions.py of the component Recipe Action Trigger. Executing a manipulation of the argument url can lead to server-side reques...

CVE-2026-94028 mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery

A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.modeldump of the file mealie/routes/households/controllergrouprecipeactions.py of the component Recipe Action Trigger. Executing a manipulation of the argument url can lead to server-side reques...

CVE-2026-94028

Mealie (mealie-recipes) versions up to 3.25.1 contain a server-side request forgery (SSRF) vulnerability in the Recipe Action Trigger component, specifically in the payload.model_dump function within mealie/routes/households/controller_group_recipe_actions.py. A remote attacker with low privilege...

CVE-2026-94028 mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery

A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.modeldump of the file mealie/routes/households/controllergrouprecipeactions.py of the component Recipe Action Trigger. Executing a manipulation of the argument url can lead to server-side reques...

Review.CVE-2023-5612

CVE-2023-5612 – GitLab 通过 Webhook URL 的 SSRF（PoC 与分析） 📌 CVE 概览 CVE 编号： CVE-2023-5612 严重性： 高（CVSS 基本评分 8.1） 类型： 服务端请求伪造（SSRF） 组件： GitLab CE/EE Webhooks 受影响版本： GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888" \ http://:8080/api/v4/projects//hooks 🧱 环境与搭建 root@kitploit: - 在专门为测试部署的虚拟机中运...

DEBIAN-CVE-2026-94108

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2026-94108

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2026-94108

getID3 (PHP library) versions through 1.9.26 are affected by an XML External Entity (XXE) injection in the XML2array helper function. The root cause is that entity loading is not properly disabled when running on PHP before 8.0 . An attacker can craft malicious XML metadata in media files to disc...

CVE-2026-94108 getID3 through 1.9.26 XML External Entity Injection via XML2array

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2026-94108 getID3 through 1.9.26 XML External Entity Injection via XML2array

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

EUVD-2026-83728

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2026-16542

The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-privileged users to perform Server-Side Request Forgery attacks...

CVE-2026-16542 Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar

The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-privileged users to perform Server-Side Request Forgery attacks...

EUVD-2026-83661

The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-privileged users to perform Server-Side Request Forgery attacks...

CVE-2026-16542

Import and export users and customers WordPress plugin versions prior to 2.4.5 are vulnerable to a Server-Side Request Forgery (SSRF) flaw. The plugin does not validate a user-supplied URL before issuing a server-side request during a CSV import process. The CVELIST and Vulnrichment entries ident...

CVE-2026-55993

camel-atmosphere-websocket 消息头注入复现工具 CVE-2026-55993 本项目演示了 Apache Camel 的 camel-atmosphere-websocket 组件中的一个消息头注入 漏洞，编号为 CVE-2026-55993 。WebSocket 消费者将连接的查询参数复制到 Camel Exchange 上，未使用任何HeaderFilterStrategy，因此客户端只需将这些参数添加到 WebSocket URL 的查询字符串中，即可注入 Camel 控制消息头——尤其是 CamelHttpUri： root@kitploit: //...

CVE-2020-10770-keycloak-exploit-poc

Keycloak 盲 SSRF POC 这是一份关于如何测试由 Lauritz Holtmann 发现的盲 SSRF CVE-2020-10770 的分步指南，该漏洞记录在他的博客文章中。 他还简要解释了如何测试该漏洞。这里只是更详细的说明。 所有功劳归于 Lauritz。 环境搭建 我在这里使用 Mac OSX 上的 Docker。 我需要三个终端，一个运行 Keycloak 实例，一个用于监听器，一个用于发送 curl 请求。 防御方 你需要一个运行中的 Keycloak 实例，版本 ）。如果你使用其他 Client ID，则必须更改攻击 HTTP...

CVE-2023-45966

CVE-2023-45966 umputun/remark42 的 POST 请求中的恶意 JSON 导致了 Blind SSRF。 附加信息 修复于提交：efceed6 漏洞类型其他 CWE-918：服务器端请求伪造 产品供应商 https://github.com/umputun 受影响产品代码库 受影响版本：umputun/remark42 = 1.12.1 受影响组件 /api/v1/comment 攻击类型 远程 影响代码执行 false 影响拒绝服务 false 影响特权提升 false 影响信息泄露 true 攻击向量 攻击者能够发送特制的 JSON 发现者 Dmitry...