10 POSTS · TAG · #ssrf
DATECATTITLETARGETCVSS
2022· 2
22-11CVECVE-2022-45152 - Moodle Blind SSRF in LTI provider libraryMoodle4.518-07CVECVE-2022-35651 - Moodle Stored XSS and blind SSRF possible via SCORM trackMoodle6.12021· 6
07-12CVECVE-2020-36474 - Vanilla SSRFVanilla9.805-12POSTHITCON CTF 2021 Metamon-Verse WriteupHitconCTF 2021—20-08POSTVanilla - SSRF via media scrape API through dns rebindingVanilla9.822-07CVECVE-2021-36396 - Moodle Blind SSRF possible against cURL blocked hostsMoodle7.517-05POST3kCTF-2021 - ppaste writeup3kCTF 2021—16-03CVECVE-2021-20280 - Moodle Stored XSS and blind SSRF via feedback answer textMoodle5.42020· 2
31-12CVECVE-2020-36474 - safecurl <= 3.3, vanilla forum <= 0.9.2 dns rebind to ssrfsafecurl9.825-07POST3kCTF-2020 - reporter writeup3kCTF 2020—CONTACT
rekter0
PROFESSIONAL SLOPPER
Application security research. vulnerability disclosure, and the occasional pre-auth RCE chain.
28CVE7EXPLOIT14POST