url-cheatsheet-data

URL validation bypass cheat sheet data This is the data that powers the PortSwigger URL validation bypass cheat sheet. We have put this data on Github so the community can contribute vectors via pull requests. Contributing To contribute, please create a pull request with changes to the JSON data...

CVE-2023-42222

CVE-2023-42222 Resumen de la vulnerabilidad WebCatalog anterior a la versión 48.4.0 llama a la función Electron shell.openExternal sin verificar que la URL corresponda a un recurso http o https, en algunas circunstancias. Esta vulnerabilidad permite a un atacante ejecutar código en la máquina de ...

CVE-2026-106498

The Backstage framework (prior to versions 3.5.1, 3.6.2, 3.7.2, 3.8.2, and 3.9.1) is vulnerable in the @backstage/plugin-catalog-backend package due to improper url validation during catalog entity placeholder resolution. An authenticated user can craft a catalog entity with placeholder directive...

CVE-2022-41401

OpenRefine = v3.5.2 SSRF OpenRefine v=3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure. The root cause of this vulnerability lies ...

CVE-2024-56331

CVE-2024-56331 Uptime-Kuma : Local File Inclusion LFI via Improper URL Handling in Real-Browser monitor Summary An Improper URL Handling Vulnerability allows an attacker to access sensitive local files on the server by exploiting the file:/// protocol. This vulnerability is triggered via the...

NPM: i18next-http-backend incomplete URL validation permits SSRF

NPM: i18next-http-backend incomplete URL validation permits SSRF vulnerability discovered by ? in WordPress Npm i18next-http-backend versions 4.0.2...

SCANNER-INURLBR

Nuevo repositorio Búsqueda avanzada en motores de búsqueda, permite el análisis proporcionado para explotar GET/POST capturando correos electrónicos y urls, con una unión de validación personalizada interna para cada objetivo/url encontrada. https://github.com/MrCl0wnLab/SCANNER-INURLBR...

CVE-2023-40037

CVE-2023-40037: Incomplete Validation of JDBC and JNDI Connection URLs in Apache NiFi Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs...

WSO2 - Server Side Request Forgery

WSO2 products contain SSRF and reflected XSS vulnerabilities in the deprecated Try-It feature accessible only to administrative users, caused by improper URL validation and direct content reflection, letting attackers trick admins into executing arbitrary JavaScript and querying internal services...

Gotenberg < 8.31.0 - Server-Side Request Forgery

Gotenberg before 8.31.0 is vulnerable to server-side request forgery SSRF due to insufficient validation of URLs in the downloadFrom API. An unauthenticated attacker can exploit the flaw by providing specially crafted IPv4-mapped IPv6 addresses such as http://::ffff:127.0.0.1 that bypass the...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE Description This repository contains an exploit for CVE-2024-34361, a critical vulnerability CVSS 8.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and tracking domains at the network level. The vulnerability...

CVE-2025-55816

CVE-2025-55816 CVE-2025-55816 HotelDruid 3.0.7 Author: partywave Collab: Raptx team External references HotelDruid 3.0.8 changelog CVE blogpost Raptx site Vulnerability The vulnerability is a simple Stored Cross Site Scripting XSS in /modificaapp.php endpoint. The attacker can insert a javascript...

CVE-2021-41277

CVE-2021-41277 Usage 1. show help info /CVE-2021-41277 ❯ go run main.go -h Usage of main: -f string File containing list of targets to verfity -o string File to write output to optional -s Show VulnInfo output -t int Number of concurrent goroutines for resolving default 10 -u string Target to...

SSRF-CVE-2020-15002

Summary The URL validation logic applied when handling /appsuite/api/oxodocumentfilter&action=addfile suffers from three defects which can be used to execute Time of Check Time of Use ToCToU SSRF attack. This issue allows malicious actors to execute HTTP GET requests on internal network services...

CVE-2026-55252 OpenRun: Redirect URL validation bypass using //host paths leads to Open Redirect

OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect attacks. This issue has been patched in version...

CVE-2025-21385

SSRF Exploit Script This repository contains a script designed to perform an SSRF Server-Side Request Forgery exploit for testing and educational purposes. Use this tool responsibly and only in environments where you have explicit permission. Features Exploit SSRF vulnerabilities in target system...

CVE-2026-103686

A flaw has been found in rhukster dom-sanitizer up to 1.0.15. Impacted is the function DOMSanitizer::isDangerousUrl of the file src/DOMSanitizer.php of the component URL Validation. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-103686 rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting

A flaw has been found in rhukster dom-sanitizer up to 1.0.15. Impacted is the function DOMSanitizer::isDangerousUrl of the file src/DOMSanitizer.php of the component URL Validation. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

EUVD-2026-90847

A flaw has been found in rhukster dom-sanitizer up to 1.0.15. Impacted is the function DOMSanitizer::isDangerousUrl of the file src/DOMSanitizer.php of the component URL Validation. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-103686 rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting

A flaw has been found in rhukster dom-sanitizer up to 1.0.15. Impacted is the function DOMSanitizer::isDangerousUrl of the file src/DOMSanitizer.php of the component URL Validation. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...