
Yunus Aydın@aydinnyunuss
Disclosure
I found an SSRF vulnerability bypass via DNS rebinding in simstudioai/sim a project with 25k+ stars on GitHub (CVE-2025-69660). Full write-up: https://aydinnyunus.github.io/2026/03/14/ssrf-dns-rebinding-vulnerability/ #security #websecurity #appsec #cve #bugbounty
Post summary
A new SSRF vulnerability (CVE-2025-69660) with a DNS rebinding bypass was identified in the simstudioai/sim project, with a detailed write‑up linked in the text.
23201701326.9K
960 followersView on X
