CVE-2026-93580

The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a target order's parcel tracking number to forge its shipme...

CVE-2026-93580

The InPost PL WordPress plugin (versions prior to 1.9.8 ) is vulnerable to unauthenticated order status forgery. The root cause is a failure to verify the authenticity of incoming shipment webhook requests; the plugin relies on a non-secret identifier and an unenforced IP check. This allows an un...

CVE-2026-93580 InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook

The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a target order's parcel tracking number to forge its shipme...

CVE-2026-93580 InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook

The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a target order's parcel tracking number to forge its shipme...

EUVD-2026-89623

The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a target order's parcel tracking number to forge its shipme...

CVE-2025-63571

설명 AI ​​시스템ChatGPT GPT-5 분석 중에 SSRFServer-Side Request Forgery 취약점이 발견되었습니다. 이 문제는 애플리케이션이 사용자가 제출한 외부 URL예: webhook을 검증이나 정화 없이 자동으로 가져와서 실행하기 때문에 발생합니다. 이 결함을 악용하면 공격자가 AI 서버가 내부 또는 외부 시스템에 임의의 HTTP 요청을 보내도록 강제할 수 있습니다. 이 동작은 서버의 실제 IP 주소, HTTP 헤더, 내부 서비스, 잠재적으로 클라우드 메타데이터와 같은 중요한 정보를 노출합니다. 영향...

CVE-2026-53988

Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumerate sequential stack IDs and send...

CVE-2026-102877 Fider before 0.38.0 SSRF via DNS rebinding in webhook validation

Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fider server send requests to internal...

CVE-2026-102877 Fider before 0.38.0 SSRF via DNS rebinding in webhook validation

Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fider server send requests to internal...

CVE-2026-102877

The Fider application (versions prior to 0.38.0 ) is vulnerable to Server-Side Request Forgery (SSRF) . The root cause is a time-of-check time-of-use (TOCTOU) gap during URL validation for webhooks and custom OAuth provider endpoints. An attacker who controls DNS can utilize a DNS rebinding attac...

CVE-2026-102877 Fider before 0.38.0 SSRF via DNS rebinding in webhook validation

Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fider server send requests to internal...

CVE-2026-53988 Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumerate sequential stack IDs and send...

CVE-2026-53988

Dockhand versions prior to 1.0.40 are vulnerable to an authentication bypass in the git webhook endpoints caused by a null webhook secret guard condition. This allows unauthenticated remote attackers to enumerate stack IDs and send unsigned webhook requests to trigger arbitrary stack redeployment...

EUVD-2026-89409

Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumerate sequential stack IDs and send...

CVE-2026-53988 Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumerate sequential stack IDs and send...

cve-2026-22874-gitea-ssrf-allowlist

CVE-2026-22874 — Gitea 웹훅 및 마이그레이션 허용 목록의 불완전한 SSRF 보호 CVE-2026-22874 GHSA-2r5c-gw76-rh3w에 대한 기술적 분석 및 참고 자료: Gitea의 웹훅 전달 및 저장소 마이그레이션에서 불완전한 SSRF 허용 목록, Gitea 1.26.3 에서 수정됨. 저는 이 SSRF 클래스를 Gitea 유지관리자에게 독립적으로 보고했으며, 공개된 권고에서 기여자other로 인정받았습니다. 권고의 주요 보고자는 J. Leitschuh입니다. 이 저장소는 공개 권고에 대한 방어적이고...

CVE-2025-7441

CVE-2025-7441 StoryChief 1.0.42 - 임의 파일 업로드 취약점 CVE-2025-7441 - 기술 요약 영향을 받는 구성 요소: StoryChief WordPress 플러그인 취약점 유형: 인증되지 않은 임의 파일 업로드 취약한 엔드포인트: /wp-json/storychief/webhook 근본 원인: 플러그인은 data.featuredimage.data.sizes.full 아래에 URL을 포함한 JSON 웹훅 페이로드를 수락하고, 충분한 검증 없이 도메인 허용 목록 부재, 불충분한 MIME/콘텐츠 검사,...

CVE-2026-34207

CVE-2026-34207 SSRF 필터는 호스트명 텍스트를 검사했지만, 실제 목적지는 나중에 DNS에 의해 결정되었습니다. 이 간격으로 인해 공격자가 제어하는 Webhook URL이 루프백, 메타데이터 및 사설 네트워크 대상에 도달할 수 있었습니다. 소개 저는 오픈소스 챗봇 빌더인 Typebot 을 검토하면서 간단한 보안 질문을 염두에 두고 이 문제를 발견했습니다. SSRF 보호가 호스트명 텍스트를 검증하지만 실제 목적지는 나중에 DNS에 의해 결정된다면 어떻게 될까? 이 경우, 그 질문은 실제 버그로 이어졌습니다...

CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

CVE-2026-5556 – 대소문자 구분을 통한 Kubernetes Admission Controller 우회 프로그램 코드 Python admission webhook + 익스플로잇 !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flask import Flask, request, jsonify app = Flaskname DENIEDPODNAMES = "kube-system-svc",...

path-traversal-CVE-2026-14628

경로 탐색 데모 - 사례 연구 : CVE-2026-14628 최근 공개된 CVE-2026-14628을 실제 사례 참조점으로 사용하여 경로 탐색CWE-22 취약점 클래스를 보여주는, 실행 가능한 최소한의 데모입니다. 실제 취약점 CVE-2026-14628은 'NousResearch/hermes-agent' 2026.5.16에 영향을 미칩니다. gateway/platforms/base.py의 extractmedia 함수는 들어오는 웹훅 페이로드에서 검증 없이 파일 시스템 경로를 구성하므로, 원격의 인증되지 않은 공격자가 의도된 미...