Attributed metadata history
Up to 100 retained publisher events per page for a6a3b766e6fa87507bd10388f6407529d85b7da6aeda3eed28e049436f54fa74. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_dd4a4c98d64bc46b3f
observed · 2026-10-12 15:55:04 UTC
available
Fingerprint: 412205efeb4951e4cf52e76cd81d6198ec880146f81b3192d0a4bbd93bc7c1d1
intelligence_src_dd4a4c98d64bc46b3f
observed · 2026-10-12 15:55:04 UTC
VulnCheck's Initial Access Intelligence team details an unauthenticated SSRF in Monsta FTP 2.14.4, where an IPv4-only blocklist waves through the IPv4-mapped IPv6 form of the cloud metadata endpoint and bypasses both the front gate and the anti-rebinding recheck.
Fingerprint: c5d4ee8cc9558e00f37e5db573c683d44fc096ad3b2f6ae78f139372f473a246