Tag
#DNS Rebinding
blogHIGH 8.8
DNS Rebinding Vulnerability in GenieACS MCP
A DNS rebinding vulnerability exists in the genieacs-mcp package, allowing a malicious web page to interact with a victim's local GenieACS MCP server. This can lead to unauthorized access and control of the GenieACS system.
blogHIGH 8.5
Understanding and Defending Against Server-Side Request Forgery (SSRF) in PraisonAI
This educational analysis covers CVE-2026-61430, a server-side request forgery (SSRF) vulnerability in PraisonAI versions before 1.6.78. The vulnerability allows attackers to bypass SSRF protection using DNS rebinding and retrieve internal HTTP response bodies from private or loopback services. We will delve into the root cause, attack surface, exploitation mechanics, real-world impact, detection strategies, and defensive recommendations.