CVE-2018-12463

CVE-2018-12463 XML external entity XXE vulnerability in /ssc/fm-ws/services in Fortify Software Security Center SSC 17.10, 17.20 & 18.10 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request.. Exploit-DB...

nextssrf

root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...

hopgoblin

hopgoblin hopgoblin is a scanner for Adobe Experience Manager AEM instances. It automates a handful of checks that we frequently perform manually during security assessments. Features Detects exposed QueryBuilder endpoints: /bin/querybuilder.json /bin/querybuilder.feed Abuses QueryBuilder to:...

CVE-2026-46457

CVE-2026-46457 — camel-nats Inbound Header Injection SSRF Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

autossrf

Resumen autoSSRF es tu mejor aliado para identificar vulnerabilidades SSRF a escala. Diferente de otras herramientas de automatización SSRF, esta viene con las dos siguientes características originales: Fuzzing inteligente en parámetros GET relevantes para SSRF Al hacer fuzzing, autoSSRF solo se...

lorsrf

LORSRF - 2.1 Lorsrf es una potente herramienta de pruebas de penetración web diseñada para identificar parámetros que pueden ser explotados para ataques SSRF o de carga de recursos fuera de banda. Al añadir un host OAST como Burp Collaborator al valor del parámetro, Lorsrf puede generar una...

bugbounty-cheatsheet

Bug Bounty Cheat Sheet 📚 Reference| 🔎 Vulnerabilities ---|--- Bug Bounty Platforms| XSS Books| SQLi Special Tools| SSRF Recon| CRLF Injection Practice Platforms| CSV Injection Bug Bounty Tips| LFI | XXE | RCE | Open Redirect | Crypto | Template Injection | Contributing We welcome contributions fr...

CVE-2026-51385

CVE-2026-51385 Advisory for CVE-2026-51385. Needed to publish it as GRAPHIFY hasnt recognized the advisory neither publish it, and MITRE assigned CVE-2026-51385, this is the advisory for it. ES: Este fue mi primer cve, para ser honesto encontre una manera de romper la logica en la funcion ANTI...

malicious-pdf

악성 PDF 생성기 ☠️ PDF 뷰어, 변환기, 웹 애플리케이션에서 폰-홈 콜백, SSRF, XSS, XXE, NTLM 자격 증명 도용 및 데이터 유출을 테스트하기 위한 67개의 악성 PDF 테스트 파일을 생성합니다. Burp Collaborator 또는 Interact.sh와 함께 사용할 수 있습니다. 침투 테스트, 버그 바운티 헌팅, 레드-팀 작업 등에 사용됩니다. 다양한 링크가 포함된 여러 PDF 파일을 생성할 도구가 필요하여 이 도구를 만들었습니다. 교육 및 전문 목적으로만 사용하세요. 사용법 pip install -r...

bugbounty_tools

bugbountytools Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own personal use, and occassionally public released Contact: For questions, comments or request make a psot to my X account not in DM and I will do what I...

mcp-attack-detection-sentinel

MCP Attack Detection — Sentinel Research Lab Sentinel detection research for MCP Model Context Protocol attack patterns : unusual identity access after an MCP-related event, tool-definition mutation, cross-resource access, and possible post-exploitation behavior. The rules map to the OWASP Top 10...

CVE-2026-3576

CVE-2026-3576 - Wordpress Plugin Planyo Online Reservation System = 3.0 - Arbitrary File Read via SSRF This repo contains a python based Proof of ConceptPoC exploit for CVE-2026-3576. It can also be found in Exploit-DB here. I have also developed a Metasploit module for this exploit which can be...

tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

Tugtainer v1.30.2 RCE The RCE is obtained by abusing 2 vulnerabilities CVE-2026-55494 CVE-2026-62308 In short, a SSRF vulnerability is abused to call to an unauthenticated service in the internal network to create a docker that shares the same pid with tugtainer, thus making the file system of th...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

gitlab-SSRF-redis-RCE

gitlab-SSRF+CRLF-Redis-RCE GitLab 11.4.7 SSRF+CRLF Injection Combined with Redis Remote Code Execution 0x00 Vulnerability environment root@kitploit: root@kali: cd gitlab-docker root@kali: docker-compose up -d root@kali: docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES cf8c38aef6...

gitlab-cve-2021-22214

gitlab-cve-2021-22214 Gitlab SSRF Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2026-15409

🚨 CVE-2026-15409 Critical Unauthenticated SSRF in SonicWall SMA1000 Series Critical Server-Side Request Forgery SSRF vulnerability affecting SonicWall SMA1000 Series appliances. This repository documents the vulnerability, affected products, technical overview, impact, detection guidance, and...

CVE-2021-22214

CVE-2021-22214 Description - POC for CVE-2021-22214: Gitlab CI Lint API未授权 SSRF漏洞 - create by antx at 2021-11-01. Detail - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was...

CVE-2022-3590-WordPress-Vulnerability-Scanner

CVE-2022-3590 WordPress Vulnerability Scanner This Python script is designed to check whether a WordPress website is vulnerable to the CVE-2022-3590 vulnerability. The vulnerability exploits an unauthenticated blind Server-Side Request Forgery SSRF in the pingback feature of WordPress. Getting...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / local file read via response URL CVE-2026-13233 Untrusted upstream: the provider that fetched the URL its response told it to. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Coordinated disclosure complete...