Plunk — PoC Archivehttps://poc.intelseclab.com/tags/plunk/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Plunk SSRF via Unvalidated AWS SNS SubscriptionConfirmation — CVE-2026-32096https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-32096-plunk-sns-ssrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-32096-plunk-sns-ssrf/Critical severity (CVSS 9.3) — cloud · CVE-2026-32096. Status: PoC. Affects: Plunk (useplunk/plunk) email/webhook API. Tags: ssrf, aws-sns, imds, cloud-metadata, plunk, cwe-918, unauthenticated.cloudCriticalssrfaws-snsimdscloud-metadataplunkcwe-918unauthenticatedCRLF Email Header Injection in Plunk via Raw MIME Construction (CVE-2026-34975)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34975-plunk-crlf-email-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34975-plunk-crlf-email-injection/High severity (CVSS 8.5) — web · CVE-2026-34975. Status: PoC. Affects: Plunk (useplunk/plunk). Tags: crlf-injection, email, plunk, mime, header-injection, bcc-injection, cwe-93.webHighcrlf-injectionemailplunkmimeheader-injectionbcc-injectioncwe-93