appsec.fyi › Server-Side Request Forgery (SSRF)

Server-Side Request Forgery (SSRF) Resources

Page 18 of 23: resources 851–900 of 1,136, added Jan 2025 to Mar 2025.

The newest Server-Side Request Forgery (SSRF) resources are on the Server-Side Request Forgery (SSRF) page. For a reading order instead of a date order, see the Server-Side Request Forgery (SSRF) learning path.

Date AddedLinkExcerpt
2025-03-13 2025@GreyNoiseIO Experts warn of a coordinated surge" in the exploitation attempts of #SSRF flaws #securityaffairs #hacking newsExperts from GreyNoiseIO have issued a warning about a coordinated surge in exploitation attempts targeting SSRF flaws. This poses a significant risk to security, as SSRF vulnerabilities can be exploited by hackers for malicious activities. The increase in these exploitation attempts highlights the importance of addressing and patching SSRF vulnerabilities to protect against potential security breaches.
2025-03-13 2025Experts warn of a coordinated surge" in the exploitation attempts of #SSRF flaws #securityaffairs #hacking newsSecurity experts are cautioning about a notable increase in coordinated exploitation attempts targeting Server-Side Request Forgery (SSRF) vulnerabilities. This surge in attacks poses a significant threat to cybersecurity. The warning highlights the importance of addressing and patching SSRF flaws promptly to prevent potential security breaches and hacking incidents.
2025-03-13 2025Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in a Coordinated Cyber Attack! Read the full report: #CyberSecurity #SSRF #Hacking #CloudSecurity #CyberThreats #DataBreach #InfoSec #CyberAttack #NetworkSecurity #EthicalHacking newsOver 400 IPs are involved in a coordinated cyber attack exploiting multiple SSRF vulnerabilities. The full report provides details on this cybersecurity threat, covering topics like hacking, cloud security, data breaches, network security, and ethical hacking. The attack highlights the importance of addressing vulnerabilities and enhancing cybersecurity measures to protect against cyber threats.
2025-03-13 2025Coordinated surge in SSRF attacks detected with over 400 IPs exploiting multiple vulnerabilities simultaneously. Organizations urged to strengthen defenses. #CyberCode #SSRF #ThreatAlert newsA coordinated surge in SSRF attacks involving over 400 IPs exploiting multiple vulnerabilities simultaneously has been detected. Organizations are advised to enhance their defenses against these threats. The alert emphasizes the importance of strengthening cybersecurity measures to mitigate risks associated with SSRF attacks. #CyberCode #SSRF #ThreatAlert.
2025-03-13 2025Over 400 #IPs #Exploiting Multiple #SSRF #Vulnerabilities in Coordinated #Cyber_Attack newsThe content discusses a coordinated cyber attack involving over 400 IPs exploiting multiple Server-Side Request Forgery (SSRF) vulnerabilities. This attack highlights the importance of addressing and patching vulnerabilities to prevent such incidents.
2025-03-13 2025Over 400 IPs are exploiting SSRF vulnerabilities in a coordinated cyber attack warns GreyNoise. Stay informed on these threats! #CyberSecurity #SSRF #ThreatIntel newsGreyNoise has identified over 400 IPs exploiting SSRF vulnerabilities in a coordinated cyber attack. This highlights a significant threat to cybersecurity. It is crucial to stay informed about these threats to protect against potential attacks. The warning emphasizes the importance of monitoring and addressing SSRF vulnerabilities to enhance cybersecurity defenses. #CyberSecurity #SSRF #ThreatIntel.
2025-03-12 2025SSRF Exploitation Surge Highlights Evolving Cyberthreats beginner 2 min readAnalysis of a coordinated surge in Server-Side Request Forgery (SSRF) attacks, highlighting exploitation of critical vulnerabilities including CVE-2020-7796 in Zimbra, CVE-2021-21973 and CVE-2021-22054 in VMware, and multiple CVEs in GitLab. These attacks, originating from hundreds of unique IP addresses across various countries, demonstrate a structured and automated approach to breaching internal systems and cloud environments by accessing metadata APIs and mapping networks. → esecurityplanet.com
2025-03-12 2025infosecbulletin.com/400-ips-exploi #infosecbulletin #ssrf newsThe content shared is a link to a webpage discussing the exploitation of 400 IPs, related to security vulnerabilities known as Server-Side Request Forgery (SSRF). The link provided seems to offer more details or insights on this topic. The hashtags #infosecbulletin and #ssrf suggest that the content is related to information security bulletins and SSRF vulnerabilities.
2025-03-12 2025Over 400 IPs Exploiting #Multiple #SSRF #Vulnerabilities in Coordinated Cyber Attack scyscan.com/news/over-400- newsOver 400 IPs are exploiting multiple Server-Side Request Forgery (SSRF) vulnerabilities in a coordinated cyber attack. The attack is significant and concerning, as SSRF vulnerabilities can be used to manipulate server requests and potentially access sensitive information or systems. The source of this information is scyscan.com/news.
2025-03-12 2025MAIS DE 400 IPS EXPLORANDO VÁRIAS VULNERABILIDADES SSRF EM ATAQUE CIBERNÉTICO COORDENADO #SamirNews #mais #de #400 #ips #explorando #várias #vulnerabilidades #ssrf #em #ataque #cibernético #coordenado newsOver 400 IPs are exploiting multiple SSRF vulnerabilities in a coordinated cyber attack. The attack is significant and coordinated, targeting various vulnerabilities. The content is related to cybersecurity and highlights the exploitation of SSRF vulnerabilities by a large number of IPs. The post includes hashtags like #SamirNews and provides a link for more information.
2025-03-12 2025Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack beginner 2 min readAnalysis of coordinated cyber attacks revealing over 400 IPs simultaneously exploiting multiple Server-Side Request Forgery (SSRF) vulnerabilities. Notable exploited CVEs include CVE-2020-7796 (Zimbra), CVE-2021-22175 and CVE-2021-22214 (GitLab), and CVE-2024-21893 (Ivanti Connect Secure). The activity, observed by GreyNoise, suggests structured exploitation and potential use of Grafana for reconnaissance before launching SSRF attacks. → thehackernews.com
2025-03-09 2025Common SSRF Attack Vectors Internal APIs & cloud metadata services Localhost services (127.0.0.1) Open Redirects & DNS rebinding Misconfigured webhooks & integrations Know your attack surface! #SSRF #CyberAwareness beginnerThe content discusses common Server-Side Request Forgery (SSRF) attack vectors, including targeting internal APIs, cloud metadata services, localhost services (127.0.0.1), open redirects, DNS rebinding, and misconfigured webhooks/integrations. It emphasizes the importance of understanding your attack surface to prevent SSRF attacks. The post raises awareness about cybersecurity and encourages vigilance against SSRF threats.
2025-03-09 2025What is Server-Side Request Forgery (SSRF)? SSRF tricks a server into making unintended requests potentially bypassing security controls. Attackers can exploit this to: Access internal services Bypass firewalls Steal sensitive data Stay alert! #CyberSecurity #SSRF beginnerServer-Side Request Forgery (SSRF) tricks servers into making unintended requests, bypassing security controls. Attackers exploit this to access internal services, bypass firewalls, and steal sensitive data. Stay alert for SSRF threats in cybersecurity.
2025-03-06 2025My First Successful Bug Bounty Report! Super excited to share that Ive successfully reported my first security vulnerability through a bug bounty program! Found a Unauthenticated Blind SSRF vulnerability and the report was accepted #BugBounty #ssrf beginnerThe content celebrates the author's first successful bug bounty report, where they discovered an Unauthenticated Blind SSRF vulnerability and had their report accepted. The author is excited to share this achievement through a bug bounty program. The post includes hashtags #BugBounty and #ssrf.
2025-03-03 2025My First Successful Bug Bounty Report! Super excited to share that Ive successfully reported my first security vulnerability through a bug bounty program! Found a Unauthenticated Blind SSRF vulnerability and the report was accepted #BugBounty #ssrf beginnerThe content shares the author's excitement about successfully reporting their first security vulnerability through a bug bounty program. They discovered an Unauthenticated Blind SSRF vulnerability, and their report was accepted. The author highlights their achievement and uses hashtags like #BugBounty and #ssrf to share their experience.
2025-02-24 2025SSRF Prevention Tip #4 Validate & sanitize user input! Reject non-HTTP/HTTPS URLs Restrict port ranges Use safe URL parsers to prevent bypasses Security starts with input validation! #CyberSec #SSRF intermediateThe content emphasizes the importance of preventing Server-Side Request Forgery (SSRF) by validating and sanitizing user input. It suggests rejecting non-HTTP/HTTPS URLs, restricting port ranges, and using safe URL parsers to avoid bypasses. Highlighting that security begins with input validation, the post stresses the significance of these measures in cybersecurity. #CyberSec #SSRF.
2025-02-24 2025SSRF Prevention Tip #3 Never return raw responses! SSRF exploits often rely on getting API responses. Mask or sanitize responses to prevent attackers from extracting sensitive info! #SSRF #APIsecurity intermediateTip #3 for preventing Server-Side Request Forgery (SSRF) attacks advises against returning raw API responses to thwart attackers from extracting sensitive information. Masking or sanitizing responses is recommended to enhance security and protect against SSRF exploits. This precaution helps safeguard against potential vulnerabilities and ensures API security.
2025-02-24 2025SSRF Prevention Tip #1 Use an allowlist for external domains! Only permit URLs from trusted sources (e.g. Google Drive Gravatar). Block unknown origins to prevent malicious requests. #AppSec #SSRF intermediateThe content provides a tip for preventing Server-Side Request Forgery (SSRF) attacks by using an allowlist for external domains. It suggests allowing only URLs from trusted sources like Google Drive and Gravatar while blocking unknown origins to avoid malicious requests. This practice enhances application security and helps mitigate the risk of SSRF vulnerabilities. The use of an allowlist is recommended to restrict access to specific domains, reducing the attack surface and protecting against unauthorized requests. #AppSec #SSRF.
2025-02-24 2025Real-World SSRF Attack A social network lets users upload profile pictures via a URL. An attacker submits: 📌 "picture_url": "http://localhost:8080" 📌 API unintentionally scans internal ports! 🚨#SSRF #CyberThreats— Otesile Olaoluwa (@OtesileOlaoluwa) February 24, 2025 intermediateThe content discusses a real-world Server-Side Request Forgery (SSRF) attack on a social network that allows users to upload profile pictures via a URL. The attacker submitted a malicious URL pointing to "http://localhost:8080," triggering the API to unintentionally scan internal ports. This incident highlights the vulnerability of SSRF attacks and the potential cybersecurity threats they pose. The tweet warns about the attack and raises awareness about the importance of safeguarding against such cyber threats.
2025-02-24 2025What is SSRF? Server-Side Request Forgery (SSRF) lets attackers force an API to fetch remote resources without validation. This can bypass firewalls expose sensitive data and even lead to DoS attacks. #CyberSecurity #SSRF beginnerSSRF, or Server-Side Request Forgery, allows attackers to manipulate APIs to access remote resources without validation. This vulnerability can circumvent firewalls, compromise sensitive data, and potentially trigger denial-of-service (DoS) attacks. It poses significant cybersecurity risks and requires attention to prevent exploitation.
2025-02-22 2025SSRF challenge cracked on TryHackMe! Learned how insecure server-side requests can expose internal systems. Hack learn secure repeat! #CyberSecurity #SSRF #TryHackMe #BugBounty tryhackme.com/r/room/ssrfqi? beginnerThe content discusses successfully completing an SSRF challenge on TryHackMe, highlighting the risks of insecure server-side requests exposing internal systems. The message emphasizes the importance of learning, securing, and repeating the process. It also mentions cybersecurity, SSRF, TryHackMe, and Bug Bounty. The link provided directs to the TryHackMe room for the SSRF challenge.
2025-02-20 2025SSRF flaw in Sliver C2 teamserver lets attackers spoof callbacks (CVE-2025-27090). Patch now to avoid compromise! #SSRF #Cybersecurity #Vulnerability newsA Server-Side Request Forgery (SSRF) flaw in Sliver C2 teamserver allows attackers to spoof callbacks (CVE-2025-27090). It is crucial to patch this vulnerability immediately to prevent potential compromise. Stay vigilant about cybersecurity threats and take necessary actions to secure your systems. #SSRF #Cybersecurity #Vulnerability.
2025-02-18 2025Explore "Hacking Layer 7" for insights on web vulnerabilities and defenses. ethicbreach.com/2025/02/18/app #ethicbreach #L7Hack #CyberSec #EthHack #WebSec #AppSec #OWASP #Inject #Srvr #Clnt #SMTP #DNS #FTP #SSRF #Hdrs #Vldtn #SecCode Follow for insights like if helpful! beginnerThe content discusses exploring "Hacking Layer 7" for insights on web vulnerabilities and defenses, with hashtags related to cybersecurity topics. It encourages following for helpful insights. The link provided directs to a webpage for further information. Key points include focusing on Layer 7 vulnerabilities, using relevant hashtags, and promoting engagement for cybersecurity insights.
2025-02-17 2025#ssrf Your First Critical Bug Bounty! SSRF Hunting Made Easy youtu.be/bSn7tWFP354?fe via @YouTube beginnerThe content discusses finding Server-Side Request Forgery (SSRF) vulnerabilities for bug bounties, providing tips and guidance for beginners. It highlights a video tutorial on SSRF hunting, aiming to make the process easier. The link leads to a YouTube video offering insights on identifying and exploiting SSRF vulnerabilities. The content emphasizes the importance of SSRF as a critical bug bounty target and suggests resources for learning more about this type of vulnerability.
2025-02-17 2025Common application #vulnerabilities attacks: - path/directory traversal - session hijacking - #CSRF - #DDOS - #IDOR - #CRLF - race condition (TOCTTOU) - insecure deserialization (object injection) - forced browsing (url not restricted) - #XXE - #SSRF beginnerThe content discusses common application vulnerabilities attacks such as path/directory traversal, session hijacking, CSRF, DDoS, IDOR, CRLF, race condition, insecure deserialization, forced browsing, XXE, and SSRF. These vulnerabilities can be exploited by attackers to compromise the security of applications. It is crucial for developers and organizations to be aware of these vulnerabilities and implement proper security measures to protect their applications from potential attacks.
2025-02-17 2025New Writeup Alert! "SSRF Advanced Methodology" by Abhijeet kumawat is now live on IW! Check it out here: infosecwriteups.com/ecbe289886ef #money #infosec #ssrf #hacking #bugbounty advancedAbhijeet Kumawat's new writeup on "SSRF Advanced Methodology" is now available on IW. The content covers SSRF techniques and bug bounty hunting related to hacking and information security. Readers can access the writeup at infosecwriteups.com/ecbe289886ef. The post is aimed at those interested in money, infosec, SSRF, hacking, and bug bounty programs.
2025-02-16 20254/7 From code injection to #SQL attacks @Microsoft wants your help finding vulnerabilities in Copilot AI. Report issues like #SSRF or authentication flaws and earn rewards! #Cybersecurity #AI #BugHunting newsMicrosoft is seeking help to identify vulnerabilities in Copilot AI, offering rewards for reporting issues like code injection, SQL attacks, SSRF, and authentication flaws. This initiative aims to enhance cybersecurity by addressing potential weaknesses in the AI system. Bug hunters can contribute to improving the security of Copilot AI and earn rewards for their efforts.
2025-02-15 2025@kcsfa There is a misconfiguration that could lead to password #bruteforce Server side requests forgery #ssrf that could leak internal IP's and lead to #RCE #API { "id": 1 "name": "c" "url": "" "description": "" "link ........ } intermediateThe content warns about a misconfiguration that could result in password brute-forcing, server-side request forgery (SSRF) leading to leaking internal IPs, and remote code execution (RCE) via API. It includes a snippet of code with an ID, name, URL, and description. The post emphasizes the potential security risks associated with the mentioned misconfiguration.
2025-02-10 2025#Zimbra Releases# Security Updates for #SQL_Injection #Stored_XSS and #SSRF #Vulnerabilities newsZimbra has released security updates addressing SQL injection, stored XSS, and SSRF vulnerabilities. These updates aim to enhance the security of the Zimbra platform by fixing these critical issues. Users are advised to promptly apply the updates to protect their systems from potential exploitation.
2025-02-10 2025Warning: Critical and Medium Improper Neutralization in SQL command and Server-Side Request Forgery #SSRFin #Zimbra #SyncService #Zimbracollaboration#CVE-2025-25064 #CVE-2025-25065 CVSS: 9.8-5.3. An attacker can execute an SQL injection to exploit these vulnerabilities.#Patch newsThe content warns of critical and medium vulnerabilities related to improper neutralization in SQL commands and Server-Side Request Forgery (#SSRF) in Zimbra's SyncService and Zimbra collaboration. The vulnerabilities are identified as CVE-2025-25064 and CVE-2025-25065 with CVSS scores of 9.8 and 5.3. An attacker could exploit these vulnerabilities through SQL injection. A patch is recommended to address these security issues.
2025-02-10 2025ZIMBRA LIBERA ATUALIZAÇÕES DE SEGURANÇA PARA INJEÇÃO DE SQL XSS E VULNERABILIDADES SSRF #SamirNews #zimbra #libera #atualizações #de #segurança #para #injeção #de #sql #xss #e #vulnerabilidades #ssrf newsZimbra has released security updates addressing SQL injection, XSS, and SSRF vulnerabilities. The updates aim to enhance security measures against these potential threats. The announcement was made through the #SamirNews platform and includes hashtags related to Zimbra, security updates, SQL injection, XSS, and SSRF vulnerabilities.
2025-02-10 2025Zimbra Releases Security Updates for SQL Injection Stored XSS and SSRF Vulnerabilities news 1 min readLibrary updates address critical vulnerabilities in Zimbra Collaboration, including CVE-2025-25064, a high-severity SQL injection in ZimbraSync Service allowing authenticated attackers to retrieve email metadata by manipulating a parameter. Stored XSS in the Zimbra Classic Web Client and CVE-2025-25065, a medium-severity SSRF flaw in the RSS feed parser, were also patched, enabling unauthorized redirection to internal network endpoints. → thehackernews.com
2025-02-10 2025DeepStrike | SSRF with Dirty Hands: Real-Life Scenarios of SSRF Attacks beginnerExplore real-world scenarios of Server-Side Request Forgery (SSRF) attacks, their impact, and mitigation strategies to enhance your cybersecurity defenses.
2025-02-07 2025Preventing SSRF at the Application Layer Validate & sanitize user input Use an allow-list for URLs ports & destinations Disable HTTP redirections Be cautious of DNS rebinding & TOCTOU race conditions Secure coding saves lives! #DevSecOps #SSRF intermediateTo prevent Server-Side Request Forgery (SSRF) at the application layer, validate and sanitize user input, use an allow-list for URLs, ports, and destinations, disable HTTP redirections, and be cautious of DNS rebinding and TOCTOU race conditions. Secure coding practices are crucial for preventing SSRF incidents. The content emphasizes the importance of DevSecOps and implementing these measures to enhance security and protect against SSRF vulnerabilities.
2025-02-07 2025How does SSRF work? A web app fetches a remote resource without validating the user-supplied URL. Attackers exploit this to send malicious requests accessing internal services metadata & even causing RCE! #AppSec #SSRF beginnerSSRF (Server-Side Request Forgery) occurs when a web app fetches a remote resource without validating the user-supplied URL. Attackers exploit this vulnerability to send malicious requests, accessing internal services, metadata, and potentially causing Remote Code Execution (RCE). Proper validation of user input is crucial to prevent SSRF attacks. #AppSec #SSRF
2025-02-06 2025Microsoft SharePoint Connector Flaw Could've Enabled Credential Theft Across Power Platform news 2 min readWriteup detailing a server-side request forgery (SSRF) vulnerability in the Microsoft SharePoint connector for Power Platform. Exploitation, requiring Environment Maker and Basic User roles, could lead to credential theft and unauthorized API requests across Power Automate, Power Apps, and Copilot. Microsoft patched the flaw, identified as Important severity, in December 2024. → thehackernews.com
2025-02-06 2025SSRF attacks can cripple your Go apps. Learn how to prevent them with this step-by-step guide & code examples. #golang #security #SSRF snyk.co/uh2GO intermediateThe content discusses how Server-Side Request Forgery (SSRF) attacks can harm Go applications and provides a step-by-step guide with code examples to prevent them. It emphasizes the importance of securing Go apps against SSRF attacks for enhanced security. The guide aims to help developers understand and implement measures to safeguard their applications from potential vulnerabilities. The content is relevant for those working with Go programming language and interested in enhancing the security of their applications.
2025-02-05 20252/8 How does the SharePoint vulnerability work? Attackers could exploit Server-Side Request Forgery (SSRF) to inject malicious URLs steal JWT tokens and make unauthorized #API requests. A serious risk for organizations using Power Platform! #CyberThreat #SSRF #API intermediateThe SharePoint vulnerability allows attackers to use Server-Side Request Forgery (SSRF) to inject malicious URLs, steal JWT tokens, and make unauthorized API requests. This poses a significant risk to organizations using the Power Platform. The exploit highlights the importance of addressing cybersecurity threats like SSRF.
2025-02-05 2025Learn how to master SSRF Vulnerabilities with our step-by-step guide using PortSwigger Labs! Dive deep into the process and sharpen your skills. #SSRF #CyberSecurity #WebAppSecurity #cybersecurityskills #EthicalHacking #TrendingNow intermediateMaster SSRF vulnerabilities with a step-by-step guide using PortSwigger Labs to enhance cybersecurity skills. Dive deep into the process for ethical hacking and web app security. Trending topic in cybersecurity. #SSRF #CyberSecurity #WebAppSecurity #cybersecurityskills #EthicalHacking
2025-02-05 2025SSRF: Anatomy of a Cloud Attack @ Cloud Village | @seasides_conf 2025! Join @Zero0x00 as he explores SSRF attacks with Burp Suite & AWS Metadata. A must-attend for cloud security pros! 22 Feb 2025 #CloudSecurity #SSRF #Seasides2025 intermediateThe content discusses an upcoming session at the Cloud Village event at the Seasides Conference 2025, focusing on SSRF attacks using Burp Suite and AWS Metadata. Led by @Zero0x00, the session is aimed at cloud security professionals and is scheduled for February 22, 2025. It emphasizes the importance of understanding SSRF attacks in cloud security. Attendees are encouraged to join to gain insights into this critical aspect of cloud security.
2025-02-04 2025[A Practical Guide] Exploiting SSRF with Filter Bypass via Open Redirection Source: link.medium.com/HVR71xVBHQb #ssrf #openredirect #ssrfexploitation #openredirectexploitation #ssrffilterbypass #bugbounty #bugbountytips intermediateThe content provides a practical guide on exploiting Server-Side Request Forgery (SSRF) with filter bypass using open redirection. It discusses techniques to bypass filters and exploit vulnerabilities related to SSRF and open redirection. The focus is on bug bounty tips and strategies for exploiting SSRF vulnerabilities effectively. The content aims to provide insights and practical guidance for security researchers and bug bounty hunters interested in SSRF exploitation.
2025-02-03 2025Nowy odcinek na YouTube! Jak działa SSRF (Server-Side Request Forgery) i jak atakujący mogą manipulować żądaniami HTTP? Sprawdź jak wykrywać i testować tę podatność! Obejrzyj teraz: #SSRF #Cybersecurity #BurpSuite #Pentesting #WebSecurity beginnerThe content discusses a new YouTube episode about SSRF (Server-Side Request Forgery), explaining how attackers manipulate HTTP requests and how to detect and test this vulnerability. It invites viewers to watch the episode to learn more about SSRF, cybersecurity, BurpSuite, pentesting, and web security. The link provided directs viewers to the YouTube video.
2025-02-02 2025CVE-2024-54819 - I Librarian Server Side Request Forgery #CVE202454819 #ILibrarian #SSRF #Cybersecurity #Vulnerability newsThe content discusses a specific cybersecurity vulnerability identified as CVE-2024-54819 in I Librarian, related to Server Side Request Forgery (SSRF). The vulnerability is highlighted with relevant hashtags for tracking and awareness. For more details, the link provided can be accessed for additional information.
2025-02-01 2025Looking for a Burp Collaborator alternative for SSRF testing? Bug bounty hunters & pentesters Interactsh is a must-have for SSRF exploitation web security and bug bounties. #BugBounty #PenetrationTesting #SSRF #HackingTools #ProjectDiscovery intermediateInteractsh is recommended as a Burp Collaborator alternative for SSRF testing by bug bounty hunters and pentesters. It is considered essential for SSRF exploitation, web security, and bug bounties. The tool is highlighted for its effectiveness in these areas and is associated with Bug Bounty, Penetration Testing, SSRF, Hacking Tools, and Project Discovery.
2025-01-29 2025Hey @deepseek_ai are you guys paying for Read SSRF vulnerability? I also got 56 XSS manually and was able to automate it to A&T. Let me know. #XSS #DeepSeekV3 #DeepSeek #ssrf #bugbountytips #BugBounty beginnerThe content is a message directed at @deepseek_ai asking if they pay for SSRF vulnerabilities. The sender mentions discovering 56 XSS vulnerabilities manually and automating them to A&T. They invite @deepseek_ai to contact them. The message includes hashtags related to XSS, DeepSeek, SSRF, bug bounty tips, and Bug Bounty.
2025-01-28 2025Kritieke ssrf kwetsbaarheid in microsoft purview ontdekt: wat u moet weten #CVE-2025-21385 #Microsoft Purview kwetsbaarheid #SSRF-aanval #beveiligingsupdate #cybersecurity #Trending #Tech #Nieuws newsA critical SSRF vulnerability in Microsoft Purview has been discovered, tagged as #CVE-2025-21385. This vulnerability poses a risk of SSRF attacks, emphasizing the importance of applying security updates promptly. The news highlights the significance of cybersecurity in tech trends. Stay informed and vigilant to protect systems from potential exploits.
2025-01-28 2025Smol TryHackMe Writeup #smol #writeup #tryhackme #SSRF #WordPress #JSmol2WP #RCE #john #SUDO intermediateThe content is a brief writeup about a TryHackMe challenge named "Smol." It likely covers topics such as Server-Side Request Forgery (SSRF), WordPress vulnerabilities, JSmol2WP, Remote Code Execution (RCE), John the Ripper (password cracking tool), and SUDO privilege escalation. The writeup may provide insights into how these concepts were utilized to solve the challenge. The link provided seems to direct to the full writeup for those interested in detailed information.
2025-01-28 2025Warning: Recent security update in #Kibana fixes #CVE-2024-43707 & #CVE-2024-43710. #Update to version 8.15.0 #SSRF #exposure of #sensitive #information #Patch #Patch #Patch newsA recent security update in Kibana addresses CVE-2024-43707 and CVE-2024-43710, fixing vulnerabilities related to SSRF and exposure of sensitive information. Users are advised to update to version 8.15.0 to patch these issues. It is crucial to apply the patch promptly to protect against potential security threats.
2025-01-25 2025Belangrijke informatie over server-side request forgery kwetsbaarheid in microsoft purview: cve-2025-21385 https://t.co/SMmCXDhzNB #CVE-2025-21385 #Microsoft Purview #SSRF kwetsbaarheid #Cybersecurity #Informatiebeveiliging #Trending #Tech #Nieuws newsThe content discusses a significant server-side request forgery vulnerability in Microsoft Purview with the CVE-2025-21385 identifier. It emphasizes the importance of this vulnerability in terms of cybersecurity and information security. The post is trending in the tech news and highlights the need for attention to this issue. The link provided likely directs to more detailed information about the vulnerability.
2025-01-25 2025Kritieke ssrf kwetsbaarheid in microsoft purview ontdekt: bescherm uw gegevens kwetsbaarheid Purview beveiliging -2025-21385 bescherming update newsA critical SSRF vulnerability in Microsoft Purview has been discovered, emphasizing the importance of protecting data. The vulnerability is identified as CVE-2025-21385, highlighting the need for security updates to safeguard network data. This news is trending in the tech community, urging users to take necessary precautions to enhance Microsoft Purview security.