Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.192 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: SSRF

Displaying 1 - 25 results out of 183

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
Severity
Exploitable
with Sniper
Apache Tika - XXE InjectionNetwork Scanner

Critical(9.8)

No
Canto <= 3.1.1 - Missing Authorization to Unauthenticated File UploadNetwork Scanner

Medium(5.3)

No
Dify < 1.13.0 - Unauthenticated SSRF via Remote File UploadNetwork Scanner
N/A
No
BrightSign Digital Signage 8.2.26 - Server-Side Request ForgeryNetwork Scanner
N/A
No
WordPress FluentCRM <= 2.9.87 - Unauthenticated Blind SSRFNetwork Scanner

Medium(5.4)

No
Next.js WebSocket Upgrade Handler - SSRFNetwork Scanner

High(8.6)

No
MagicMirror <= 2.35.0 - Server-Side Request ForgeryNetwork Scanner

Critical(9.2)

No
Astro SSR - Server-Side Request ForgeryNetwork Scanner

High(8.6)

No
LMDeploy - Server-Side Request ForgeryNetwork Scanner

High(7.5)

No
LolLMS < 2.2.0 - Server-Side Request ForgeryNetwork Scanner

High(7.5)

No
Arcane <= 1.17.2 - Server-Side Request ForgeryNetwork Scanner

High(7.2)

No
WSO2 - Server Side Request ForgeryNetwork Scanner

Medium(5.9)

No
Stirling-PDF < 1.1.0 - Server-Side Request ForgeryNetwork Scanner

Critical(9.8)

No
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)Network Scanner

Critical(9.8)

No
Apache CXF < 4.0.4 - Aegis DataBinding SSRF / Local File ReadNetwork Scanner

High(7.5)

No
BMC FootPrints 'feedUrl' - Server-Side Request ForgeryNetwork Scanner

High(8.6)

No
BMC FootPrints - Authentication BypassNetwork Scanner

Medium(6.5)

No
BMC FootPrints 'searchWeb' - Server-Side Request ForgeryNetwork Scanner

High(8.6)

No
Hasura GraphQL Engine - Server Side Request ForgeryNetwork Scanner
N/A
No
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)Network Scanner

Critical(9.8)

No
Atlassian Confluence XSLT Macro - Server-Side Request ForgeryNetwork Scanner

Medium(6.5)

No
Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)Network Scanner

Medium(5.8)

No
Ektron CMS Blogs xmlrpc.aspx - XML External Entity InjectionNetwork Scanner
N/A
No
Selenium Grid ExposureNetwork Scanner
N/A
No
Gradio Image Component - Server-Side Request Forgery (None)Network Scanner

High(8.6)

No