WordPress-6.9.1-Blind-SSRF

WordPress-6.9.1-Blind-SSRF 该漏洞没有分配 CVE。 Affected Versions 6.8 - 6.8.3 6.9 - 6.9.1 WordPress = 6.9.1 - 未经身份验证的盲 SSRF（通过 XML-RPC Pingback Discovery）概念验证 PoC Usage 1. 如果尚未安装 requests，请安装 pip install requests 2. 修改代码中的配置变量（例如 WORDPRESSURL、TARGETPOST 和 CALLBACKURL） 3. 执行脚本 python main.py...

Linux Distros Unpatched Vulnerability : CVE-2025-54352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RPC requests. NOTE: the Supplier is not...