CVE-2026-15146: CWE-918 Server-Side Request Forgery (SSRF) in GNU wget Wget
GNU Wget contains a Server-Side Request Forgery (SSRF) vulnerability due to improper validation of IP addresses in FTP PASV responses. An attacker controlling an FTP server or an HTTP server…
Read the full articleYou might also wanna read
Comprehensive Guide to SSRF Testing: From URL Parameters to Cloud Metadata Exploitation
The Ultimate SSRF Testing Bible: How Hackers Pivot from URL Parameters to Cloud Metadata in 2026 + Video - "Undercode Testing": Monitor hack
undercodetesting.com·26d ago
Preventing server-side request forgery in Node.js applications
This article will explore SSRF, its potential risks, and the strategies to mitigate SSRF in Node.js applications.
ReSSRF: An Automated SSRF Discovery Tool Using OAST-Powered Parameter Fuzzing
ReSSRF: Unleashing Next-Gen Automated SSRF Discovery with OAST-Powered Parameter Fuzzing + Video - "Undercode Testing": Monitor hackers like
undercodetesting.com·27d ago
WAF - WAF Release - 2025-09-29
This week highlights four important vendor- and component-specific issues: an authentication bypass in SimpleHelp (CVE-2024-57727), an infor
CISA Orders Emergency Patching for Actively Exploited Cisco Unified CM SSRF Vulnerability
The bug affects Cisco Unified Communications Manager, and it sits in a service many organizations rely on for voice and collaboration traffi
cysecurity.news·13d ago
How to Mitigate SSRF Vulnerabilities in Go
Dive into Server-Side Request Forgery (SSRF) vulnerabilities in Go applications and explore mitigation techniques. Learn how to secure your
Comments
Sign in to join the conversation.
No comments yet. Be the first.