Lucene search
+L

4512 matches found

EUVD
EUVD
added 2026/08/24 6:31 p.m.3 views

EUVD-2026-65010

Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backend/app/Validators/Rules/NoInternalUrlRule.php resolves the hostname with gethostbyname and rejects private and reserved ranges, which any public hostname passes. At dispatch,...

8.4CVSS5.5AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/24 4:44 p.m.3 views

Malicious code in secret-key-totp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f662164281fe877686c7eac93e0e6d068ccb16f8bff1b44029b1ace655a76b6 [email protected] declares a postinstall hook node./index.js --setup that executes a credential stealer and dropper on install, and the same...

6.1AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/24 2:47 p.m.3 views

CVE-2026-58314

A flaw was found in Gitea. This vulnerability, known as Server-Side Request Forgery SSRF, allows an attacker to trick the server into making requests to internal network resources. A logged-in user can exploit this by crafting malicious webhooks or repository migration configurations, leading to...

8.6CVSS5.4AI score0.00295EPSS
SaveExploits0References6
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.72 views

Budibase - Authentication Bypass

Budibase = 3.31.4 contains an authentication bypass caused by unanchored regex in authorized middleware matching webhook path patterns in query strings, letting unauthenticated remote attackers access any server-side API endpoint, exploit requires crafted request with webhook pattern in URL. id:...

9.1CVSS5.2AI score0.15339EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.6 views

New API < v0.12.10 - Stripe Webhook Bypass

New API v0.12.10 contains a broken authentication caused by unauthenticated attacker forging Stripe webhook events, letting attackers credit arbitrary quota without payment, exploit requires no authentication. id: CVE-2026-41432 info: name: New API v0.12.10 - Stripe Webhook Bypass author: str4k3r...

8.2CVSS8.9AI score0.0085EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.54 views

GitLab CI Lint API - Server-Side Request Forgery

GitLab 10.5 and later contain a server-side request forgery caused by insecure handling of webhook requests, letting unauthenticated attackers exploit the server for arbitrary requests, exploit requires sending crafted webhook requests. id: CVE-2021-22175 info: name: GitLab CI Lint API -...

9.8CVSS9.3AI score0.53372EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.29 views

Dozzle - Server Side Request Forgery

Dozzle prior to 10.5.2 contains a server-side request forgery caused by unauthenticated access to POST /api/notifications/test-webhook forwarding attacker-controlled URLs, letting remote attackers send arbitrary HTTP POST requests and receive response data, exploit requires no authentication. id:...

8.6CVSS9AI score0.01491EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.11 views

MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass

MLflow 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach internal or cloud metadata services and obtain response details, exploit requires unauthenticated access to the webhook test endpoint. id: CVE-2026-64849 info:...

9.3CVSS8.2AI score0.08154EPSS
SaveExploits2References2
NVD
NVD
added 2026/08/22 6:16 a.m.12 views

CVE-2026-16738

The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...

5.3CVSS0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/22 6:00 a.m.31 views

CVE-2026-16738 Conekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery

The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...

0.00159EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/22 6:00 a.m.21 views

CVE-2026-16738

The Conekta Payment Gateway WordPress plugin (versions before 6.2.2 ) fails to verify the authenticity of incoming payment gateway webhook notifications and does not bind the confirmed payment to the targeted order or validate its amount. This allows unauthenticated attackers to forge webhook req...

5.3CVSS5.7AI score0.00159EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/22 6:00 a.m.12 views

EUVD-2026-64218

The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...

5.7AI score0.00159EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/21 7:14 p.m.9 views

NPM: Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers

NPM: Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers vulnerability discovered by ? in WordPress Npm unleash-server versions 7.5.2...

5.5CVSS5.4AI score0.00275EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2026/08/21 6:40 p.m.13 views

CVE-2026-54682

DiscordChatExporter prior to 2.47.2 is vulnerable to a stored XSS in its HTML export feature. When markdown formatting is disabled, attacker-controlled content from Discord messages and embeds is rendered through FormatMarkdownAsync and FormatEmbedMarkdownAsync in MessageGroupTemplate.cshtml with...

8.2CVSS5.5AI score0.00135EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 6:40 p.m.9 views

CVE-2026-54682 DiscordChatExporter: Stored XSS in HTML export when markdown formatting is disabled

DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, HTML exports generated with markdown formatting disabled pass attacker-controlled content through FormatMarkdownAsync and FormatEmbedMarkdownAsync in DiscordChatExporter.Core/Exporting/MessageGroupTemplate.cshtml and render i...

8.2CVSS5.6AI score
SaveExploits0References6
OSV
OSV
added 2026/08/21 6:05 p.m.11 views

CVE-2026-63004 Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsystem passes the operator-controlled parameters.url value from src/lib/addons/webhook.ts and the Slack, Microsoft Teams, Datadog, and New Relic integrations to Addon.fetchRetry i...

5.5CVSS5.6AI score
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/21 6:05 p.m.28 views

CVE-2026-63004 Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsystem passes the operator-controlled parameters.url value from src/lib/addons/webhook.ts and the Slack, Microsoft Teams, Datadog, and New Relic integrations to Addon.fetchRetry i...

5.5CVSS0.00275EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/21 12:16 p.m.8 views

CVE-2026-16650

The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events in a default configuration, allowing unauthenticated attackers to forge webhook notifications that mark donations as paid without any real payment...

5.3CVSS0.00125EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 12:16 p.m.7 views

CVE-2026-13176

The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify event ownership, allowing users with contributor-level access and above to trigger blind server-side requests to arbitrary hosts...

2.7CVSS0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 11:40 a.m.27 views

CVE-2026-16650 Charitable < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass

The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events in a default configuration, allowing unauthenticated attackers to forge webhook notifications that mark donations as paid without any real payment...

5.3CVSS0.00125EPSS
SaveExploits0References1
Rows per page
Query Builder