Preventing server-side request forgery in Node.js applications

Comprehensive Guide to SSRF Testing: From URL Parameters to Cloud Metadata Exploitation

This article is a comprehensive guide on Server-Side Request Forgery (SSRF) testing, covering the full attack surface beyond classic URL par

ReSSRF: An Automated SSRF Discovery Tool Using OAST-Powered Parameter Fuzzing

ReSSRF is an advanced automated fuzzing scanner designed to detect Server-Side Request Forgery (SSRF) vulnerabilities, particularly blind va

Simplified CSRF Protection Without Tokens or Hidden Form Fields for Web Frameworks

The article describes a developer's journey to implement CSRF (Cross-Site Request Forgery) protection for the Microdot web framework. Initia

Security Researchers Discover RCE Chain in PostHog Analytics Platform Through SSRF, ClickHouse Zero-Day, and Default PostgreSQL Credentials

A security research team discovered multiple critical vulnerabilities in PostHog analytics platform that could be chained together for remot

Workers - SSRF vulnerability in @opennextjs/cloudflare proactively mitigated for all Cloudflare customers

CISA Orders Emergency Patching for Actively Exploited Cisco Unified CM SSRF Vulnerability

CISA has ordered urgent patching for an actively exploited SSRF vulnerability (CVE-2026-20230) in Cisco Unified Communications Manager and U