Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/21 1:17 a.m.•10 views

CVE-2026-114064

Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx...

5.5CVSS0.0027EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/21 12:36 a.m.•12 views

CVE-2026-114064 Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint

Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx...

5.1CVSS5.9AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/10/21 12:36 a.m.•12 views

EUVD-2026-107015

Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx...

5.5CVSS5.9AI score0.0027EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/21 12:36 a.m.•14 views

CVE-2026-114064

Versions of Snipe-IT prior to 8.7.0 are vulnerable to a server-side request forgery (SSRF) flaw within the webhook testing feature . This vulnerability allows users with super-admin privileges to probe internal network addresses, including loopback and RFC1918 ranges. By pointing webhooks at inte...

5.5CVSS5.9AI score0.0027EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/21 12:36 a.m.•23 views

CVE-2026-114064 Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint

Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx...

5.5CVSS0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•10 views

PT-2026-120190

Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx...

5.5CVSS5.9AI score0.0027EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/07/05 4:30 p.m.•136 views

Exploit for CVE-2026-22874

CVE-2026-22874 — Gitea SSRF PoC ⚠️ DISCLAIMER: Este PoC...

9.6CVSS8.2AI score0.00464EPSS
SaveExploits1
Rows per page
Query Builder