DEV Community

#ssrf

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
FlareSolverr is a browser proxy with no default API authentication

FlareSolverr is a browser proxy with no default API authentication

Comments
2 min read
Accepting arbitrary URLs taught me the trust boundary is the fetch, not the parse

Accepting arbitrary URLs taught me the trust boundary is the fetch, not the parse

Comments
1 min read
Triage playbook for suspected CVE-2026-105482 exploitation

Triage playbook for suspected CVE-2026-105482 exploitation

Comments
3 min read
From Virtual Key to Internal Target: Responding to LiteLLM SSRF

From Virtual Key to Internal Target: Responding to LiteLLM SSRF

Comments
2 min read
Strapi's Webhook Runner Followed a Redirect Out of Its Trust Zone

Strapi's Webhook Runner Followed a Redirect Out of Its Trust Zone

Comments
3 min read
A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111

A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111

Comments
3 min read
A Model Registry With an Outbound Dial: What CVE-2026-64849 Hands an Unauthenticated Caller

A Model Registry With an Outbound Dial: What CVE-2026-64849 Hands an Unauthenticated Caller

Comments
4 min read
Detecting CVE-2026-96655 exploitation in Plex logs

Detecting CVE-2026-96655 exploitation in Plex logs

1
Comments 1
3 min read
Designing a reverse proxy that survives a Plex SSRF

Designing a reverse proxy that survives a Plex SSRF

Comments
3 min read
The Plex patch cluster: why one CVE is not the whole story

The Plex patch cluster: why one CVE is not the whole story

Comments
3 min read
Reading the KEV listing: CVE-2026-96655 and due dates that matter

Reading the KEV listing: CVE-2026-96655 and due dates that matter

Comments
3 min read
CVE-2026-96655: what the Plex Media Server SSRF actually exposes

CVE-2026-96655: what the Plex Media Server SSRF actually exposes

Comments
3 min read
Account hygiene is the real control for CVE-2026-96655

Account hygiene is the real control for CVE-2026-96655

Comments
3 min read
SSRF on a media server: the cloud instance case

SSRF on a media server: the cloud instance case

Comments
3 min read
Docker and NAS deployments: the CVE-2026-96655 upgrade gap

Docker and NAS deployments: the CVE-2026-96655 upgrade gap

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.