ssrf - Robuta Search

https://secably.com/cve/CVE-2026-101913/ CVE-2026-101913: SSRF — Secably CVE-2026-101913 — server-side request forgery (SSRF) vulnerability. Affected versions, references and how to fix. cve ssrf https://www.sentinelone.com/vulnerability-database/cve-2025-53250/ CVE-2025-53250: Chartbeat Plugin SSRF Vulnerability Jun 17, 2026 - CVE-2025-53250 is a server-side request forgery vulnerability in Chartbeat plugin version 2.0.7 and earlier. Learn about its impact, affected versions, and... cve chartbeat plugin ssrf vulnerability https://spy-soft.net/alternative-burp-collaborator-for-ssrf/ Альтернатива Burp Collaborator для поиска уязвимостей SSRF May 29, 2024 - Занимаетесь багхантингом? Ищите альтернативу Burp Collaborator? Вот несколько полезных ресурсов для SSRF. Сайты для поиска SSRF уязвимостей. Поиск SSRF burp collaborator ssrf https://advisories.gitlab.com/npm/flowise/GHSA-qqvm-66q4-vf5c/ Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) |... GHSA-qqvm-66q4-vf5c Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure): Flowise introduced SSRF protections... ssrf protection bypass via direct https://www.cyasha.com/zimbra-patches-for-sql-injection-xss-and-ssrf-flaws/ Zimbra Issues Critical Security Patches for SQL Injection, XSS & SSRF Flaws Feb 10, 2025 - Zimbra patches critical SQL injection, stored XSS, and SSRF vulnerabilities—update now to protect sensitive data. security patches sql injection zimbra issues critical https://genztech.blog/p/cisco-ucm-ssrf-cve-2026-20230-exploited/ Cisco UCM SSRF Flaw CVE-2026-20230 Is Under Active Attack Jul 16, 2026 - Cisco confirmed attackers are actively exploiting CVE-2026-20230, a server-side request forgery flaw in Unified Communications Manager, and CISA has added… active attack cisco ucm ssrf flaw https://blog.codesealer.com/mitigating-ssrf-attacks-with-codesealer-a-technical-deep-dive/ Mitigating SSRF Attacks with Codesealer: A Technical Deep Dive – Blog technical deep dive mitigating ssrf attacks blog https://the-pentesting-guide.marmeus.com/web/ssrf SSRF | The Pentesting Guide ssrf pentesting guide https://breachspot.com/news/data-breaches/coordinated-cyber-attack-involves-exploitation-of-multiple-ssrf-vulnerabilities-by-over-400-ips/ Coordinated Cyber Attack Involves Exploitation of Multiple SSRF Vulnerabilities by Over 400 IPs -... Sep 7, 2025 - GreyNoise, a threat intelligence firm, has issued an alarming warning regarding a "coordinated surge" in the exploitation of Server-Side Request Forgery cyber attack coordinated involves exploitation multiple https://www.apiposture.com/remediation/go-gin/how-to-fix-ssrf-in-go-gin-ghsa-fmqp-4wfc-w3v7/ SSRF in Go (Gin) remediation [Apr 2026] [GHSA-fmqp-4wfc-w3v7] | ApiPosture Remediation guide for SSRF in Go (Gin): user-supplied URLs enabling access to internal resources (169.254.169.254) metadata. Add timeouts and validation. ssrf gin remediation apr ghsa https://www.rapid7.com/db/vulnerabilities/cve-2023-39301/ CVE-2023-39301: Server-Side Request Forgery (SSRF) | Rapid7 Vulnerability Database CVE-2023-39301: Server-Side Request Forgery (SSRF). View severity, references, and remediation details from Rapid7. server side vulnerability database cve request forgery https://redmark.tw/news/server-side-request-forgery-ssrf-prevention-guide SSRF 是什麼？伺服器端請求偽造的檢測與修復完整指南｜Redmark 產業資訊 Aug 29, 2026 - SSRF 讓攻擊者借用伺服器的網路位置與服務身分，向內網、雲端 Metadata 或非預期外部目的地發出請求。完整解析 URL 解析、DNS Rebinding、Redirect、Blind SSRF、Webhook、出站網路與雲端防護。 ssrf https://bugzilla.redhat.com/show_bug.cgi?id=1978755 1978755 – (CVE-2021-21705) CVE-2021-21705 php: SSRF bypass in FILTER_VALIDATE_URL cve php ssrf bypass filter https://devhub.checkmarx.com/cve-details/cve-2022-0939/ Server-Side Request Forgery (SSRF) in calibreweb - CVE-2022-0939 - DevHub server side request forgery ssrf cve https://radar.offseq.com/threat/cve-2026-86074-cwe-918-server-side-request-forgery-ssrf-in-n8n-io-n8n-e6beda99b47a1eef CVE-2026-86074: CWE-918: Server-Side Request Forgery (SSRF)… | Threat Radar Oct 7, 2026 - Vulnerability: A Server-Side Request Forgery (SSRF) vulnerability exists in the n8n workflow automation platform prior to versions 2.37.7 and 2.38.2. The issue… server side cve cwe request forgery https://cyberwarriorsmiddleeast.com/ai-frameworks-arbitrary-code-execution-ssrf-attacks/ AI frameworks: code execution and SSRF risks | CWME Oct 4, 2026 - Google’s analysis of AI frameworks identifies code execution and SSRF risks, with 782 orchestration and agent framework disclosures in January–August 2026. code execution frameworks ssrf risks https://www.invicti.com/web-application-vulnerabilities/phpmyadmin-server-side-request-forgery-ssrf-vulnerability-cve-2017-1000017 phpMyAdmin Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-1000017) - Web Application... phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL ... phpMyAdmin... server side web application phpmyadmin request forgery https://www.sentinelone.com/vulnerability-database/cve-2026-84301/ CVE-2026-84301: FastGPT DNS Rebinding SSRF Vulnerability Sep 22, 2026 - CVE-2026-84301 is an SSRF vulnerability in FastGPT LLM platform. Learn about its DNS rebinding attack vector, affected versions, and mitigation methods. dns rebinding cve ssrf vulnerability https://www.rapid7.com/db/vulnerabilities/cve-2026-61559/ CVE-2026-61559: Server-Side Request Forgery (SSRF) | Rapid7 Vulnerability Database CVE-2026-61559: Server-Side Request Forgery (SSRF). View severity, references, and remediation details from Rapid7. server side vulnerability database cve request forgery https://whitelab.ir/social?tag=ssrf برچسب #ssrf | شبکه اجتماعی آزمایشگاه امنیت وایت لب | Whitelab برچسب #ssrf: ⚠️ آسیب‌پذیری با درجه خطر بالا در پایتون ssrf https://waf.pro/articles/security-onlyoffice-ssrf-2026/ ONLYOFFICE 插件 SSRF 通报：管理后台也需要限制出站访问 · 星极世纪 WAF.PRO 解读 CERT/CC VU#943094，明确管理员权限前提、受影响插件和可采取的隔离措施。 onlyoffice ssrf waf pro https://www.bismark.it/7987/vulnerabilita-del-framework-chainlit-ai-bug-di-lettura-file-e-ssrf/ Vulnerabilità del Framework Chainlit AI, bug di lettura file e SSRF • Bismark.it Jan 22, 2026 - Sono state scoperte vulnerabilità di sicurezza nel framework di intelligenza artificiale (AI) open-source Chainlit, che potrebbero consentire agli – Il... del framework bug lettura file https://clickup.com/p/templates/test-case/ssrf-prevention-test-case-template SSRF Prevention Test Case Template | Template by ClickUp™ This template is designed to help software development and security teams systematically test and prevent Server-Side Request Forgery (SSRF) vulnerabilities in... test case ssrf prevention template https://vdb.ai.kr/vuln/PYSEC-2026-4085 PYSEC-2026-4085 — MCP Atlassian: SSRF redirect protection missing for basic-auth · VDB MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches basic auth mcp atlassian ssrf redirect https://www.okta.com/en-se/identity-101/ssrf/ Server-Side Request Forgery (SSRF): Definition & Defense | Okta Server-side request forgery (SSRF) is a vulnerability hackers exploit to send and receive requests from the compromised server. Learn more here. server side request forgery ssrf definition https://trace.unboundcompute.com/cves/cve-2022-33987-got/ CVE-2022-33987: got: SSRF via redirect to a UNIX-domain socket | Lachesis Casefiles Sep 3, 2026 - got rewrites an initial `unix:` URL into an http-over-socket form and, crucially, only does its scheme handling on the first request... unix domain socket cve got ssrf via https://al-ice.ai/posts/2026/09/utcp-five-cve-batch-incomplete-ssrf-fixes-redirect-oauth-tokenurl/ UTCP Patched the Same SSRF Four Times — and the Redirect Hop Was Still Open — al-ice.ai NVD published five CVEs for the Universal Tool Calling Protocol on 27 September 2026. Three are incomplete-fix variants of an SSRF class first patched in May:... the same four times open al utcp patched https://jo4.io/blog/ssrf-dns-rebinding-custom-resolver/ Closing the SSRF DNS-Rebinding Hole with a Custom Resolver | Jo4 Blog Sep 28, 2026 - An up-front hostname check doesn't stop SSRF — the host re-resolves to an internal IP at connect time. Here's the TOCTOU fix that actually closes it. dns rebinding with a closing ssrf hole https://chs.us/2026/05/python-ssrf-prevention-guide/ Python SSRF Prevention Guide [2026] | chs.us May 1, 2026 - SSRF prevention in Flask, Django, and FastAPI: URL validation that survives redirects and DNS rebinding, plus how to test it before you ship. python ssrf prevention guide chs https://news.netwrck.com/item/279806 Wallabag Full Disclosure CVSS8.5 Stored XSS+SSRF after no patched no cve | News by Netwrck full disclosure stored xss wallabag ssrf patched https://www.apiposture.com/remediation/laravel/how-to-fix-ssrf-in-laravel-cve-2017-14704/ SSRF in Laravel: Remediation for CVE-2017-14704 [CVE-2017-14704] | ApiPosture Remediation guide for SSRF-like risks in Laravel apps, referencing CVE-2017-14704 in Claydip Laravel Airbnb Clone 1.0; details exploit path, impact, and fixes. ssrf laravel remediation cve https://safeguard.sh/resources/blog/ssrf-prevention-in-go SSRF Prevention in Go: net/http Safe Patterns (2026) Jul 2, 2026 - Prevent server-side request forgery in Go — block cloud metadata, private IP ranges, malicious redirects, and DNS rebinding with a custom DialContext and... ssrf prevention http safe patterns https://www-ssrl.slac.stanford.edu/content/event/seminar/2011-09-28-1500/x-ray-lasers-and-coherent-x-ray-imaging-data-bank-and-status-ssrf-and X-ray Lasers and the Coherent X-ray Imaging Data Bank and The Status of SSRF and its user operation... Speakers: Filipe Maia (Lawrence Berkeley National Laboratory), Jianhua He (Deputy Director, Shanghai Synchrotron Radiation Facility) X-ray Lasers and the... x ray coherent imaging data bank lasers status https://advisories.gitlab.com/npm/n8n-mcp/GHSA-8g7g-hmwm-6rv2/ n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure |... GHSA-8g7g-hmwm-6rv2 n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure: n8n-mcp versions before 2.50.1 contained three... path traversal mcp affected redirect following https://agentthreatrule.org/zh/rules/ATR-2026-02193 ATR-2026-02193: SSRF via Non-Canonical IPv6 Encoding of Loopback/Internal Addresses | ATR Detects an agent tool being directed to fetch a URL whose host is a non-canonical IPv6 spelling of a loopback, link-local, or cloud-metadata address -- hex-enco non canonical atr ssrf via encoding https://hlukh.ch/security-warnings-fr/id/GHSA-CXQ5-97V7-87J8 Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref —... ### Summary Orval resolves OpenAPI `$ref`s by fetching remote `http(s)` URLs and reading local files (including absolute / out-of-tree paths), inlining the... local file inclusion generation time orval ssrf remote https://www.pragmaticscanner.com/disclosures/PVD-20260906-3982.html PVD-20260906-3982: Trivy Rego Secret Disclosure and SSRF - Pragmatic Disclosure pvd trivy rego secret disclosure https://www.sentinelone.com/vulnerability-database/cve-2026-24902/ CVE-2026-24902: TrustTunnel SSRF Vulnerability Jan 29, 2026 - CVE-2026-24902 is a server-side request forgery vulnerability in TrustTunnel VPN. Learn about its impact, affected versions, and mitigation methods. cve trusttunnel ssrf vulnerability https://al-ice.ai/posts/2026/06/cloudsek-aivigil-unauthenticated-mcp-ssrf-aws-credential-theft/ CloudSEK AIVigil — Unauthenticated MCP Server Led to SSRF and AWS Credential Theft — al-ice.ai CloudSEK's AIVigil discovered a real-world case where an unauthenticated MCP server chained into SSRF, local file inclusion, and live AWS IAM credential... mcp server led to credential theft unauthenticated ssrf https://docs.connectonion.com/blog/the-check-and-the-browser-read-different-names Fix URL Parser Discrepancies in SSRF Checks | ConnectOnion Aug 29, 2026 - Align URL policy checks with browser parsing and test generator-based deny ranges inside IPv4-mapped IPv6 addresses. url parser fix discrepancies ssrf checks https://www.vulncheck.com/advisories/flowise-ssrf-via-fetch-links-endpoint-incomplete-deny-list Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List | Advisories | VulnCheck deny list ssrf via fetch links https://vdb.ai.kr/vuln/GHSA-4233-jc72-56c5 GHSA-4233-jc72-56c5 — Astro: Netlify Image CDN allowlist bypass enables SSRF · VDB Astro: Netlify Image CDN allowlist bypass enables SSRF image cdn ghsa astro netlify allowlist https://www.invicti.com/web-application-vulnerabilities/angular-server-side-request-forgery-ssrf-vulnerability-cve-2026-41423 Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-41423) - Web Application... Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to... Angular... server side web application angular request forgery https://www.cnpanda.net/en/codeaudit/678.html [Introduction to Java Code Auditing—04] SSRF Principles and Case Study — Panda's Blog 0x00 Preface. I created this series because online Java code-audit material is usually fragmented and unfriendly to beginners. I am also learning Java... java code case study introduction ssrf principles