hpfeeds

hpfeeds About hpfeedsは、軽量で認証付きのパブリッシュ/サブスクライブプロトコルです。シンプルなワイヤーフォーマットを備えているため、誰でもお気に入りの言語でほぼ即座にフィードにサブスクライブできます。異なるフィードはチャンネルごとに分離され、任意のバイナリペイロードをサポートします。つまり、チャンネルの利用者がデータ構造を決定します。hpfeedsではJSONをやり取りするのが一般的です。 このプロジェクトは、asyncio上に構築されたモダンなPython 3互換のブローカーと、Python 3互換のクライアントを提供することを目的としています。...

Subscribe to Category <= 2.7.4 - SQL Injection

The Subscribe to Category contains a sqlinjection caused by improper neutralization of special elements used in an SQL command, letting attackers execute arbitrary SQL commands, exploit requires user interaction. id: CVE-2023-32590 info: name: Subscribe to Category = 2.7.4 - SQL Injection author:...

WordPress FluentCRM <= 2.9.87 - Unauthenticated Blind SSRF

FluentCRM WordPress plugin = 2.9.87 contains a blind server-side request forgery caused by improper validation of the 'SubscribeURL' parameter, letting unauthenticated attackers make arbitrary web requests, exploit requires unconfigured SES bounce handling key. id: CVE-2026-7798 info: name:...

miniupnpd_poc

Miniupnpd path が526バイトを超えるコールバックURIを含む SUBSCRIBE リクエストを送信することで引き起こされます。 根本原因は、snprintf の戻り値を検証していないことです。snprintf は実際にコピーしたバイト数ではなく、コピー できたであろう バイト数を返すためです。 2019年1月25日時点で、このリポジトリ内のPoCはGoogle Wifiに対して正常にテストされています。 miniupnpd を利用する他のデバイスも影響を受ける可能性があります。 根本原因 upnpevents.c root@kitploit: static void...

Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)

Summary The unauthenticated WebSocket endpoint GET /subscribe is registered open: true by default config/node/api.yaml and lets a remote, unauthenticated client exhaust the node's memory and goroutines. Because the REST API runs IN-PROCESS with the node — network/api/api.go Start... ends with...

CVE-2026-86065

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe endpoint in network/api/websocket/routes.go accepts unauthenticated WebSocket clients with permissive origin handling, does not call SetReadLimit to bound message size, and has n...

CVE-2026-91073

The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing authenticated users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor who views a...

EUVD-2026-85058

The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing authenticated users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor who views a...

CVE-2026-91073 Subscribe Forms 1.4.1 - 1.6.2 - Author+ Stored XSS via Attention Effect Form Setting

The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing authenticated users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor who views a...

WordPress Subscribe Forms plugin 1.4.1-1.6.2 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Artus KG in WordPress Plugin Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form versions 1.4.1-1.6.2...

CVE-2026-91073

The Subscribe Forms WordPress plugin (versions 1.4.1-1.6.2 ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape specific form settings before they are outputted on a page. This allows authenticated users with the Author role ...

CallStranger

CallStranger このスクリプトは、CallStranger（CVE-2020-12695）の脆弱性を検査するために、Yunus Çadırcı（https://twitter.com/yunuscadirci）によって作成されました。攻撃者はこの脆弱性を以下の目的に利用できます: DLPを回避してデータを外部に送信する（データ窃取） 増幅反射型TCP DDoS / SYN Floodの送信元として、インターネットに公開された数百万台のUPnPデバイスを利用する インターネットに公開されたUPnPデバイスから内部ポートをスキャンする...

CVE-2023-32590

CVE-2023-32590 Subscribe to Category = 2.7.4 - 인증되지 않은 SQL 인젝션 설명 Subscribe to Category WordPress 플러그인은 버전 2.7.4까지에서 SQL 인젝션에 취약합니다. 사용자가 제공한 매개변수에 대한 이스케이프 처리가 부족하고 기존 SQL 쿼리에 대한 준비가 충분하지 않기 때문입니다. 이로 인해 인증되지 않은 공격자가 기존 쿼리에 추가 SQL 쿼리를 추가하여 데이터베이스에서 민감한 정보를 추출할 수 있습니다. CVE-2023-38382는 이 문제의 중복 할당...

EUVD-2026-83361

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, SseController exposes the anonymous /sse/subscribe, /sse/broadcast, and /sse/close endpoints because ShiroFilter.addPublicPathFilters permits the SSE paths, and the...

CVE-2026-63647 CordysCRM SSE Notification Stream Hijack via `/sse/subscribe`

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, SseController exposes the anonymous /sse/subscribe, /sse/broadcast, and /sse/close endpoints because ShiroFilter.addPublicPathFilters permits the SSE paths, and the...

CVE-2026-63647 CordysCRM SSE Notification Stream Hijack via `/sse/subscribe`

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, SseController exposes the anonymous /sse/subscribe, /sse/broadcast, and /sse/close endpoints because ShiroFilter.addPublicPathFilters permits the SSE paths, and the...

CVE-2026-73863

NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's broker-side MQTT v5 nmqsubinfodecode function in nng/src/sp/protocol/mqtt/mqttparser.c reuses lenofvarint from the outer Properties Length while parsing each SUBSCRIPTIONIDENTIFIER. A remote client can send a SUBSCRIBE packet with a multi-byte...

CVE-2026-73863: Out-of-bounds Read

NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's broker-side MQTT v5 nmqsubinfodecode function in nng/src/sp/protocol/mqtt/mqttparser.c reuses lenofvarint from the outer Properties Length while parsing each SUBSCRIPTIONIDENTIFIER. A remote client can send a SUBSCRIBE packet with a multi-byte...

CVE-2026-83220

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: Event Publish and Subscribe. Supported versions that are affected are 23.6-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-83220

Oracle Siebel CRM contains a vulnerability in the Siebel CRM Integration product, specifically in the Event Publish and Subscribe component, affecting supported versions 23.6 through 26.7 . The flaw allows an unauthenticated attacker with access to the physical communication segment attached to t...