A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte (%00) sequences. By crafting a request to a domain such as evil.com%00.bitdefender.com, an attacker can bypass the allowlist check, causing the proxy to forward requests to arbitrary external or internal systems.
[POC] CVE-2025-22457 — CVE-2025-22457
PoC for CVE-2025-22457
[POC] CVE-2025-22457 — CVE-2025-22457
CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE
[POC] CVE-2025-22457 — CVE-2025-22457
PoC CVE-2025-22457
[POC] CVE-2025-22457 — cve-2025-22457
Altay takımı haftalık sunumu için yaptığım cve-2025-22457 zafiyeti demo uygulaması
[POC] CVE-2025-22457 — Blackash-CVE-2025-22457
CVE-2025-22457
[POC] CVE-2025-22457 — CVE-2025-22457-PoC
CVE-2025-22457 Python and Metasploit PoC for Ivanti unauthenticated RCE
[POC] CVE-2025-22457 — ivantiunlocker
Prevent CVE-2025-22457 and other security problems with Juniper/Ivanti Secure Connect SSL VPN
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free