CVE-2026-101050 Heym before 0.0.53 Authentication Bypass via Telegram Webhook

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2026-101050 Heym before 0.0.53 Authentication Bypass via Telegram Webhook

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2026-101049 Heym before 0.0.53 Slack Webhook Signature Verification Bypass

Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged Slack events to known webhook URLs to trigger workflows with the owner's credentials...

CVE-2026-101050

Heym versions prior to 0.0.53 are vulnerable to an authentication bypass via Telegram webhook endpoints. The root cause is a failure to verify the X-Telegram-Bot-Api-Secret-Token header when the credential_id is absent or the secret_token is empty. This allows remote unauthenticated attackers to ...

CVE-2026-101049 Heym before 0.0.53 Slack Webhook Signature Verification Bypass

Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged Slack events to known webhook URLs to trigger workflows with the owner's credentials...

CVE-2026-101049

The Heym application (versions before 0.0.53 ) is vulnerable to a Slack Webhook Signature Verification Bypass . The root cause is a failure to verify signatures when trigger nodes lack credential IDs or contain empty signing secrets. This allows remote unauthenticated attackers to send forged Sla...

CVE-2026-101050 Heym before 0.0.53 Authentication Bypass via Telegram Webhook

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2026-101049 Heym before 0.0.53 Slack Webhook Signature Verification Bypass

Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged Slack events to known webhook URLs to trigger workflows with the owner's credentials...

ThreatIntelligenceDiscordBot

脅威インテリジェンス Discordボット vx-underground脅威インテリジェンスDiscordボットは、さまざまなクリアネットドメイン、ランサムウェア脅威アクタードメイン、Telegramチャンネルから更新情報を取得します。このボットは1800秒間隔で更新をチェックします（Telegramボットは除く。これはリアルタイムで取得されます）。 セットアップしたくない？ この脅威インテリジェンスボットは現在Discord上で稼働中です。 Python 3.10 64bitで記述 WindowsまたはLinuxで動作可能 Discord Webhookが必要...

CVE-2025-30208

CVE-2025-30208 이 저장소는 URL 목록에서 CVE-2025-30208을 탐지하고 스캔하는 과정을 자동화하는 Bash 스크립트가 포함되어 있습니다. 스크립트는 실행 상태를 추적하기 위해 Discord 알림을 통합합니다. 특징 detectvite.py를 실행하여 URL 목록에서 Vite 서버를 식별합니다. 식별된 Vite 서버가 포함된 hosts.txt 파일을 생성합니다. scanvite.py를 실행하여 탐지된 CVE-2025-30208을 스캔합니다. 스크립트 실행 시작 및 완료 시 Discord 알림을 전송합니다...

CVE-2026-64849-poc-lab

安全实验室 — MLflow Webhooks 中的 SSRF 利用 CVE-2026-64849 · MLflow 使用限制： 实验室材料，仅限授权网络和环境使用。参见 法律声明。 1. 执行摘要 属性| 值 ---|--- 漏洞| CVE-2026-64849 — 通过 Webhook 重定向绕过实现 SSRF 受影响组件| MLflow Tracking Server 3.15.0 实验室版本| MLflow 3.13.0（未修改，通过 pip install 安装） 根本原因| TOCTOU：验证 URL，跟随 302 而不重新验证 攻击向量| HTTP；无需身份验证 声明严重性...

Review.CVE-2023-5612

CVE-2023-5612 – GitLab SSRF via Webhook URL PoC 및 분석 📌 CVE 개요 CVE-ID: CVE-2023-5612 심각도: 높음 CVSS: 8.1 기본 점수 유형: 서버 측 요청 위조 SSRF 구성 요소: GitLab CE/EE 웹훅 영향받는 버전: GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888" \ http://:8080/api/v4/projects//hooks 🧱 환경 및 설정 - 테스트용으로 특별히 배포된 가상 머신 내의...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the getValidUrl process in the webhook connector, which fails to properly validate hostnames and private IP ranges. An attacker can cause the server to send unauthorized HTTP POST requests to interna...

CVE-2026-100865

Heym before 0.0.53 evaluates workflow condition expressions using Python's eval with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process use...

CVE-2026-100862

heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values returned in cleartext by GET /api/workflows/id and persisted unsanitized into execution history, MCP API keys stored a...

CVE-2026-100849

AzuraCast is a self-hosted web radio management suite. In AzuraCast before 0.23.8, the station webhook URL validation in AbstractConnector::getValidUrl backend/src/Webhook/Connector/AbstractConnector.php, used by the Generic and Discord webhook connectors, rejects only URLs whose host is a litera...

EUVD-2026-87830

Heym before 0.0.53 evaluates workflow condition expressions using Python's eval with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process use...

CVE-2026-100865

The Heym workflow automation platform, in versions before 0.0.53 , is vulnerable to Remote Code Execution (RCE) due to insufficient sandboxing when evaluating workflow condition expressions using Python's eval() function in the workflow executor service. Authenticated users can exploit this by ed...

EUVD-2026-87827

heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values returned in cleartext by GET /api/workflows/id and persisted unsanitized into execution history, MCP API keys stored a...

CVE-2026-100862 heym before 0.0.91 Multiple Secrets Plaintext Storage

heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values returned in cleartext by GET /api/workflows/id and persisted unsanitized into execution history, MCP API keys stored a...