CVE-2026-32096

CVE-2026-32096 SSRF عبرSubscriptionConfirmation غير مُتحقق منه في AWS SNS في useplunk/plunk الملخص نقطة نهاية Plunk API POST /webhooks/sns تجلب SubscribeURL المقدَّم من المهاجم دون التحقق من التوقيع التشفيري لـ AWS SNS. يمكن لمهاجم غير مُصادَق أن يُجبر الخادم على إجراء طلبات HTTP صادرة عشوائية...

cve-2019-6715

cve-2019-6715 تحية إلى TomNomNom على 99.9% من كوده.... البناء go get github.com/fatih/color go build الاستخدام cat list.txt | ./2019-6715 جميع عناوين URL الثغرات مسجلة في text.log CVE 2019-6715 الوصف: يسمح ملف pub/sns.php في إضافة W3 Total Cache قبل الإصدار 0.9.4 لووردبريس للمهاجمين عن بُعد بقراء...

CVE-2026-7798

The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.9.87 via the 'SubscribeURL' parameter. This makes it possible for...

CVE-2026-7798

The CVE-2026-7798 entry concerns the FluentCRM WordPress plugin (versions up to and including 2.9.87). A Blind Server-Side Request Forgery exists via the SubscribeURL parameter, enabling unauthenticated actors to make web requests from the application to internal/internal-facing targets and poten...

CVE-2026-7798: Server-Side Request Forgery (SSRF)

The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.9.87 via the 'SubscribeURL' parameter. This makes it possible for...

WordPress plugin FluentCRM 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

Exploit for CVE-2019-6715

cve-2019-6715 Shout out to TomNomNom for 99.9% of his cod...

Code injection

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data...

CVE-2019-6715

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data...

CVE-2019-6715

The CVE concerns WordPress W3 Total Cache plugin versions before 0.9.4, where an unauthenticated attacker can read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data, targeting the pub/sns.php endpoint. Technical details from connected documents specify an unauthenti...

CVE-2019-6715

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data...

CVE-2019-6715: Undefined Security Weakness

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data...