#SSRF

@offseq.bsky.social

2 days ago

CVE-2026-32301: CWE-918: Server-Side Request Forgery (SSRF) in centrifugal centr CVE-2026-32301 is a critical SSRF vulnerability affecting Centrifugo, an open-source real-time messaging server, in versions before 6.7.0. The flaw exists when Centrifugo is configured to fetch JSON Web Key Sets (JWKS) from a dynamic URL th

Centrifugo < 6.7.0 faces CRITICAL SSRF (CVE-2026-32301): unauthenticated attackers can trigger outbound server requests. Upgrade now, restrict JWKS URLs, & monitor logs. radar.offseq.com/threat/cve-2026-32301-cw... #OffSeq #SSRF #Centrifugo

0 0 0 0

Offensive Sequence

@offseq.bsky.social

3 days ago

CVE-2026-32096: CWE-918: Server-Side Request Forgery (SSRF) in useplunk plunk CVE-2026-32096 is a critical SSRF vulnerability identified in Plunk, an open-source email platform built on AWS Simple Email Service (SES). The vulnerability resides in the SNS webhook handler component of Plunk versions prior to 0.7.0. An

CRITICAL: Plunk < 0.7.0 has SSRF flaw in SNS webhook — attackers can access internal resources. Upgrade to 0.7.0+ & restrict outbound HTTP now! radar.offseq.com/threat/cve-2026-32096-cw... #OffSeq #SSRF #EmailSecurity

0 0 0 0

Offensive Sequence

@offseq.bsky.social

1 week ago

CVE-2026-30832: CWE-918: Server-Side Request Forgery (SSRF) in charmbracelet sof The vulnerability CVE-2026-30832 affects charmbracelet's soft-serve, a self-hosted Git server designed for command-line use. Versions from 0.6.0 to before 0.11.4 contain a Server-Side Request Forgery (SSRF) flaw categorized under CWE-918. A

CRITICAL: SSRF in charmbracelet soft-serve (0.6.0 – 0.11.4) lets SSH users access internal services via crafted LFS endpoints. Upgrade to 0.11.4+ now! radar.offseq.com/threat/cve-2026-30832-cw... #OffSeq #SSRF #GitSecurity

0 0 0 0

The Daily Tech Feed

@thedailytechfeed.com

1 week ago

Critical #Angular SSR vulnerability (CVE-2026-27739) allows attackers to send unauthorized requests. Update to patched versions immediately! #CyberSecurity #WebDevelopment #SSRF Link: thedailytechfeed.com/critical-ang...

1 0 0 0

BaseFortify.eu

@basefortify.bsky.social

2 weeks ago

CVE-2026-27468:
Improper authorization allows unapproved FASP clients to subscribe & request content backfill → potential Sidekiq queue overload.

CVE-2026-27477:
SSRF via crafted base_url forces the server to send HTTP(S) requests to internal systems.

#SSRF #DoS #VulnerabilityManagement #Security

0 0 1 0

2rZiKKbOU3nTafniR2qMMSE0gwZ

@2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy

3 weeks ago

Original post on systemweakness.com

TryHackMe — Include — Walkthrough Hey! Long time, no see! I have not been writing recently, but I have been doing rooms, so I thought I could write one walkthrough today and another tomorrow ma...

#tryhackme #ssrf #tryhackme-walkthrough #cybersecurity #local-file-inclusion

Origin | Interest | […]

0 0 0 0

@telegram.activitypub.awakari.com.ap.brid.gy

1 month ago

Как я написал Telegram-бота для SEO-аудита и не дал ему стать инструментом для атак Рекомендация по КДПВ: Практиче...

#Telegram #бот #Python #SSRF #rate #limiting #Redis #SEO #аудит #Баден-Баден #pyTelegramBotAPI

Origin | Interest | Match

0 0 0 0

SearchEngine

@searchengine.activitypub.awakari.com.ap.brid.gy

1 month ago

Как я написал Telegram-бота для SEO-аудита и не дал ему стать инструментом для атак

Как я написал Telegram-бота для SEO-аудита и не дал ему стать инструментом для атак Вступление (до ката) Проверить ...

#DNS #rebinding #pyTelegramBotAPI #python #rate #limiting #redis #seo #аудит #ssrf #Баден-Баден

Origin | Interest | Match

0 0 0 0

Offensive Sequence

@offseq.bsky.social

1 month ago

CVE-2026-0745: CWE-918 Server-Side Request Forgery (SSRF) in webilop User Langua CVE-2026-0745 is a Server-Side Request Forgery (SSRF) vulnerability identified in the User Language Switch plugin for WordPress, developed by webilop. The vulnerability exists in all versions up to and including 1.6.10 due to insufficient v

HIGH severity: SSRF in WordPress User Language Switch plugin lets admins access internal services. Audit your sites, restrict admin access, and monitor logs. No patch yet — act fast! radar.offseq.com/threat/cve-2026-0745-cwe... #OffSeq #WordPress #SSRF

0 0 0 0

Ahmandonk

@ahmandonk.bsky.social

1 month ago

📰 CISA Peringatkan Celah GitLab Berusia Lima Tahun yang Aktif Dieksploitasi

👉 Baca artikel lengkap di sini: ahmandonk.com/2026/02/05/celah-gitlab-...

#gitlab #keamanan #siber #kerentanan #keamanan #patch #keamanan #ssrf

0 0 0 0

@cvedatabase.bsky.social

1 month ago

Oracle Java SSRF CVE-2026-21945 in the Jan 2026 CPU is a great example of app-layer bugs with infra-level impact — are your devs plugged into CVE intel feeds? Read more at www.cvedatabase.com/cve/CVE-2026-21945

#Java #SSRF #DevSecOps #CVE202621945 #AppSec

1 1 0 0

@cvedatabase.bsky.social

1 month ago

CVE-CVE-2026-21945 | HIGH Severity | CVEDatabase.com Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported ve...

Oracle Java SSRF CVE-2026-21945 in the Jan 2026 CPU is a great example of app-layer bugs with infra-level impact — are your devs plugged into CVE intel feeds? Read more at www.cvedatabase.com/cve/CVE-...

#Java #SSRF #DevSecOps #CVE202621945 #AppSec

1 1 1 0

The Daily Tech Feed

@thedailytechfeed.com

2 months ago

Fortinet discloses SSRF vulnerability in FortiSandbox. Immediate update recommended to prevent internal traffic proxying risks. #CyberSecurity #Fortinet #SSRF #Vulnerability Link: thedailytechfeed.com/fortinet-urg...

0 0 0 0

ProyectoA - AjpdSoft

@proyectoa.bsky.social

2 months ago

Desarrollo de App de pentesting automático con Python » Proyecto A Desarrollo de aplicación en Python para análisis automático de vulnerabilidades en sitios web. Almacena el resultado en base de datos para su consulta posterior. Guarda los sitios web a analizar y ana...

Desarrollo de App de pentesting automático con Python proyectoa.com/desarrollo-d...

Desarrollo de aplicación en Python para análisis automático de vulnerabilidades en sitios web

#pentest #python #sqli #xss #lfi #ssrf #análisis #vectores #vulnerabilidades

1 0 0 0

Offensive Sequence

@offseq.bsky.social

2 months ago

Security threat visualization

CRITICAL SSRF in Yannick Lefebvre Link Library (≤7.8.4) lets attackers access internal systems—no auth required. Lock down outbound traffic & monitor requests. Act before exploits emerge! radar.offseq.com/threat/cve-2025-68600-se... #OffSeq #SSRF #Cy...

0 0 0 0

Donna E

@edwardsdna.bsky.social

2 months ago

What security bug type keeps you awake? We asked @michael_howard which security bug keeps him up at night — and his answer might surprise you. It’s Server-Side Request Forgery (SSRF), a once-obscure web bug that’s now a serious cloud threat every developer should understand. Security Blog: https://msft.it/6059tOnlH

Channel9 What security bug type keeps you awake?: We asked @michael_howard which security bug keeps him up at night — and his answer might surprise you. It’s Server-Side Request Forgery (SSRF), a once-obscure web bug that’s now a serious cloud threat every… #CyberSecurity #SSRF #WebSecurity

1 0 0 0

Donna E

@edwardsdna.bsky.social

2 months ago

What security bug type keeps you awake? We asked @michael_howard which security bug keeps him up at night — and his answer might surprise you. It’s Server-Side Request Forgery (SSRF), a once-obscure web bug that’s now a serious cloud threat every developer should understand. Security Blog: https://msft.it/6057tOnm3

Channel9 What security bug type keeps you awake?: We asked @michael_howard which security bug keeps him up at night — and his answer might surprise you. It’s Server-Side Request Forgery (SSRF), a once-obscure web bug that’s now a serious cloud threat every… #CyberSecurity #SSRF #CloudSecurity

0 0 0 0

Offensive Sequence

@offseq.bsky.social

2 months ago

Security threat visualization

CRITICAL: SSRF in Azure Cognitive Service for Language (CVE-2025-64663) enables privilege escalation. Apply strict egress filtering & monitor outbound traffic until patch is released. radar.offseq.com/threat/cve-2025-64663-cw... #OffSeq #Azure #SSRF

0 0 0 0

Offensive Sequence

@offseq.bsky.social

3 months ago

Security threat visualization

HIGH severity SSRF (CVE-2025-26487) in Infinera MTC-9 R22.1.1.0275. Monitor for vendor updates—limit server exposure in the meantime. radar.offseq.com/threat/cve-2025-26487-cw... #OffSeq #Infinera #SSRF

0 0 0 0

Offensive Sequence

@offseq.bsky.social

3 months ago

Security threat visualization

MEDIUM SSRF in orionsec orion-ops: remote abuse of SSH Connection Handler is possible. No patch yet—restrict management access & monitor for suspicious activity. radar.offseq.com/threat/cve-2025-13809-se... #OffSeq #SSRF #Vulnerability

0 0 0 0

The Daily Tech Feed

@thedailytechfeed.com

4 months ago

Alert: Critical #Kibana vulnerabilities (CVE-2025-37734) expose systems to #SSRF and #XSS attacks. Immediate patching required. #CyberSecurity #InfoSec #ElasticSecurity Link: thedailytechfeed.com/kibana-vulne...

0 0 0 0

Offensive Sequence

@offseq.bsky.social

4 months ago

Security threat visualization

Typebot <3.13.1 hit with CRITICAL SSRF (CVE-2025-64709) — lets authenticated users extract AWS EKS IAM creds. Patch to 3.13.1+ ASAP! radar.offseq.com/threat/cve-2025-64709-cw... #OffSeq #CloudSecurity #SSRF

0 0 0 0

2rZiKKbOU3nTafniR2qMMSE0gwZ

@2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy

4 months ago

Awakari App

ChatGPT Vulnerability Exposed Underlying Cloud Infrastructure A researcher found a way to exploit an SSRF vulnerability related to custom GPTs to obtain an Azure access token. The post ChatGPT Vu...

#Artificial #Intelligence #AI #ChatGPT #OpenAI #SSRF #vulnerability

Origin | Interest | Match

0 0 0 0

Offensive Sequence

@offseq.bsky.social

4 months ago

Security threat visualization

CRITICAL SSRF in charmbracelet soft-serve (<0.11.1)! Repo admins may target internal/cloud endpoints via webhooks. Patch to 0.11.1+ now — review webhook configs. radar.offseq.com/threat/cve-2025-64522-cw... #OffSeq #SSRF #CyberAlert

0 0 0 0

The Daily Tech Feed

@thedailytechfeed.com

4 months ago

CISA alerts on critical SSRF vulnerability (CVE-2025-61884) in Oracle E-Business Suite. Immediate patching recommended to prevent unauthorized access. #CyberSecurity #Oracle #SSRF #CISAAlert Link: thedailytechfeed.com/cisa-issues-...

0 0 0 0

2rZiKKbOU3nTafniR2qMMSE0gwZ

@2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy

4 months ago

CISA: Oracle vulnerability is being actively exploited The US cybersecurity agency CISA has added a serious vulnerability in Oracle E-Business Suite to its list of actively exploited vulnerabilitie...

#Security #CISA #Clop #CVE-2025-61884 #cybersecurity #Oracle […]

[Original post on techzine.eu]

0 0 0 0

Ahmandonk

@ahmandonk.bsky.social

5 months ago

📰 Oracle Perbaiki Diam-diam Zero-Day E-Business Suite yang Dieksploitasi setelah PoC Bocor

👉 Baca artikel lengkap di sini: ahmandonk.com/2025/10/15/oracle-ebs-cv...

#clop #cve #e-business #suite #keamanan #siber #oracle #patching #shinyhunters #ssrf #zero-day

0 0 0 0

Offensive Sequence

@offseq.bsky.social

5 months ago

Security threat visualization

HIGH severity SSRF in Apache Kylin (4.0.0–5.0.2) lets admins trigger internal requests. Upgrade to 5.0.3 now and secure admin access! Details: radar.offseq.com/threat/cve-2025-61735-cw... #OffSeq #ApacheKylin #SSRF

0 0 0 0

@lynxintel.bsky.social

5 months ago

🚨 Alerte CVE-2025-11046 : Une faille critique de type SSRF découverte dans Tencent WeKnora v0.1.0. Mise à jour urgente recommandée. #Cybersécurité #CVE #SSRF #Tencent #Vanta

0 0 0 0

Posts tagged #SSRF