766 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-22175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5...
Linux Distros Unpatched Vulnerability : CVE-2018-8801
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component. CVE-2018-8801 Note th...
CVE-2025-8895
The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5. This makes it possible for unauthenticated attackers to copy arbitrary files on the affected site's server to arbitrary locations...
CVE-2025-8895 WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy
The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5. This makes it possible for unauthenticated attackers to copy arbitrary files on the affected site's server to arbitrary locations...
CVE-2025-8895 WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy
The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5. This makes it possible for unauthenticated attackers to copy arbitrary files on the affected site's server to arbitrary locations...
CVE-2025-8895
CVE-2025-8895 affects the WP Webhooks plugin for WordPress. It allows unauthenticated arbitrary file copy due to missing input validation in all versions up to and including 3.3.5, enabling access to sensitive files (e.g., wp-config.php) and database credentials. The vulnerability is rated critic...
PT-2025-34199
Name of the Vulnerable Software and Affected Versions: WP Webhooks plugin for WordPress versions up to and including 3.3.5 Description: The WP Webhooks plugin for WordPress is susceptible to arbitrary file copy due to insufficient validation of user-supplied input. This allows unauthenticated...
WordPress plugin WP Webhooks 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
WordPress WP Webhooks plugin <= 3.3.5 - Unauthenticated Arbitrary File Copy vulnerability
Unauthenticated Arbitrary File Copy vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WP Webhooks versions = 3.3.5...
MAL-2025-39011 Malicious code in webhooks-etl (npm)
The package webhooks-etl was found to contain malicious code...
MAL-2025-21039 Malicious code in fullcube-webhooks-incoming (npm)
The package fullcube-webhooks-incoming was found to contain malicious code...
Malicious code in isotope-webhooks (npm)
The package isotope-webhooks was found to contain malicious code...
Malicious code in webhooks-etl (npm)
The package webhooks-etl was found to contain malicious code...
Malicious code in fullcube-webhooks-incoming (npm)
The package fullcube-webhooks-incoming was found to contain malicious code...
MAL-2025-23440 Malicious code in isotope-webhooks (npm)
The package isotope-webhooks was found to contain malicious code...
@clerk/backend Performs Insufficient Verification of Data Authenticity
Impact Applications that use the verifyWebhook helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed webhook events. Patches @clerk/backend: the helper has been patched as of 2.4.0 @clerk/astro: the helper has been patched as of 2.10.2 @clerk/express: the helper...
CVE-2025-53548 @clerk/backend Performs Insufficient Verification of Data Authenticity
Clerk helps developers build user management. Applications that use the verifyWebhook helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed webhook events. The issue was resolved in @clerk/backend 2.4.0...
Malicious code in json-webhooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776d1361c31fc0cb7ceb907404e53747cde097dab00614dafac0820111281ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5281 Malicious code in json-webhooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776d1361c31fc0cb7ceb907404e53747cde097dab00614dafac0820111281ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
