externalip-webhook

externalip-webhook 为解决 CVE-2020-8554 而创建 注意： 此 chart 在 Kubernetes 1.21 版本中已弃用，自 1.22 版本起不再支持。要缓解 CVE-2020-8554，请在集群上启用 DenyServiceExternalIPs 准入控制器。 externalip-webhook 是一个验证 webhook，用于阻止服务使用随机外部 IP。集群管理员可以通过指定 allowed-external-ip-cidrs 参数来配置允许用作外部 IP 的 CIDR 列表。Webhook 将仅允许创建不需要外部 IP 或其外部 IP...

CVE-2026-21858

🚨 CVE-2026-21858 — “Ni8mare” 一个无需认证的远程代码执行漏洞，影响开源工作流自动化平台。 📖 目录 概述 技术细节 严重等级与 CVSS 受影响版本 影响 利用 检测 修复 临时措施 总结 🔎 概述 CVE-2026-21858 ，代号 “Ni8mare” ，是 n8n 中的一个严重漏洞。n8n 是一个用于构建自动化工作流（例如自动化 API 调用、集成、SaaS 连接器）的流行平台。 该漏洞允许未经认证的远程攻击者 与未正确验证的 webhook/表单端点交互，从而未经授权访问文件及内部服务器资源。 成功利用该漏洞可能导致完全远程代码执行（RCE）...

CVE-2026-73316

CVE-2026-73316: PayPal webhook replay XenForo before 2.3.13 processes the same valid PayPal REST webhook more than once. What happens The PayPal REST provider overrides XenForo's base transaction validator but omits its duplicate transaction-log lookup. The database index is also non-unique. Two...

CVE-2026-73315

CVE-2026-73315: SSRF through PayPal certificate URL XenForo before 2.3.13 fetches the certificate URL supplied by a PayPal REST webhook without restricting its destination. What happens The callback handler passes PAYPAL-CERT-URL to XenForo's trusted HTTP reader. It does not require a PayPal...

CVE-2026-73314

CVE-2026-73314: Unsupported PayPal signature algorithm accepted XenForo before 2.3.13 fails open when a PayPal REST webhook names an unsupported signature algorithm. What happens The webhook handler maps PAYPAL-AUTH-ALGO through a small allowlist. If the value is unknown, the mapped algorithm...

CVE-2026-42231

GHSA-q5f4-99jv-pgg5 — Contaminación de prototipos en webhook XML de n8n → RCE CVE: CVE-2026-42231 Severidad: Crítica CVSS 10.0 Afectados: n8n . xml2js 0.6.2 usa Object.defineProperty con un descriptor de datos para establecer claves de elementos en objetos analizados. Debido a que 'proto' in obj...

cve-2026-3854-test

CVE-2026-3854 prueba de omisión de parche webhook-baseline-test 1777481540 webhook-inject-test 1777481589...

SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - Explotación de Cadena Completa RCE en n8n 1. Resumen Ejecutivo y Visión General Este documento presenta un análisis técnico determinista de reconstrucción de la vulnerabilidad...

cve-2026-24514-Kubernetes-Dos

CVE-2026-24514 – Agotamiento crítico de memoria en el webhook de admisión de validación de ingress-nginx Vulnerabilidad de denegación de servicio remota no autenticada / con privilegios bajos que permite a los atacantes bloquear los pods del controlador ingress-nginx mediante solicitudes...

CVE-2026-32096

CVE-2026-32096 SSRF mediante SubscriptionConfirmation de AWS SNS sin validar enuseplunk/plunk Resumen El endpoint de la API de Plunk POST /webhooks/sns obtiene un SubscribeURL proporcionado por el atacante sin verificar la firma criptográfica de AWS SNS. Un atacante no autenticado puede forzar al...

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

ImpactOpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations.An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

CVE-2026-64849.yaml

id: CVE-2026-64849 info: name: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass author: DhiyaneshDk severity: critical description: | MLflow 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach interna...

CVE-2025-7441

CVE-2025-7441 StoryChief data - sizes - full que apunta a una URL arbitraria. StoryChief no realiza una validación suficiente del tipo/contenido del archivo ni restringe el origen de la URL, lo que permite al plugin descargar el recurso remoto y guardarlo en el directorio de subidas del sitio. La...

ingressNightmare-CVE-2025-1974-exps

Ingress Nightmare CVE-2025-1907 描述 此漏洞允许远程攻击者在受影响的 kubernetes/ingress-nginx 安装环境上执行任意代码。利用此漏洞无需身份验证。具体缺陷存在于对 HTTP 请求的处理过程中。 该漏洞通过发送两个请求触发。第一个是发送到同一 Pod 中 NGINX 服务器的长缓冲请求，随后 nginx 会将其缓存为临时文件。第二个请求是发送到准入校验 Webhook 服务器的请求，这会触发准入 Webhook 写入一个包含 sslengine badsolocation; 指令的临时 nginx 配置。然后准入 Webhook 会运行...

CVE-2024-39713

CVE-2024-39713: Rocket.Chat SSRF PoC 描述 服务器端请求伪造（SSRF）影响了Rocket.Chat的Twilio webhook端点，版本低于6.10.1。 链接： https://nvd.nist.gov/vuln/detail/CVE-2024-39713 https://hackerone.com/reports/1886954 使用 pip install -r requirements.txt python3 CVE-2024-39713.py -u Rocket.Chat URL -t SSRF target nuclei -t...

POC_CVE-2025-14700

CVE-2025-14700 PoC para CVE-2025-14700 , una vulnerabilidad de inyección de plantillas del lado del servidor SSTI en Crafty Controller = 4.6.1. Esta vulnerabilidad permite a los usuarios autenticados lograr la ejecución remota de código RCE mediante la inyección de plantillas Jinja2 maliciosas en...

CVE-2026-103245

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node webhook handler. Unauthenticated attackers can send forged webhook requests with attacker-controlled payloads to trigger workflows and...

CVE-2026-103245

Versions of n8n prior to 1.123.80, 2.39.6, and 2.40.1 are vulnerable to a missing webhook signature verification flaw in the Webflow Trigger node webhook handler. The application fails to verify the x-webflow-signature HMAC, allowing unauthenticated attackers to send forged webhook requests with ...

CVE-2026-103245 n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node webhook handler. Unauthenticated attackers can send forged webhook requests with attacker-controlled payloads to trigger workflows and...

K000163487: OpenShift vulnerabilities CVE-2017-12195, CVE-2017-15137, and CVE-2017-15138

Security Advisory Description CVE-2017-12195 A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication...