Lucene search
+L

371 matches found

NVD
NVD
•added 2025/11/18 6:16 p.m.•17 views

CVE-2025-63828

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection...

6.1CVSS0.00213EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/18 12:00 a.m.•7 views

CVE-2025-63828

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection...

7AI score0.00213EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/18 12:00 a.m.•14 views

CVE-2025-63828

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection...

6.1CVSS7.3AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•1 views

CVE-2025-63828: URL Redirection to Untrusted Site

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection...

6.1CVSS5.9AI score0.00213EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/18 12:00 a.m.•52 views

CVE-2025-63828

Backdrop CMS version 1.32.1 is vulnerable to a Host Header Injection flaw due to improper validation of the Host header during password reset requests . An attacker can manipulate this header to redirect users to malicious domains and potentially perform session hijacking via cookie injection. Wh...

7AI score0.00213EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/11/18 12:00 a.m.•31 views

CVE-2025-63828

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection...

0.00213EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/18 12:00 a.m.•33 views

PT-2025-47370

Name of the Vulnerable Software and Affected Versions Backdrop CMS version 1.32.1 Description A Host Header Injection flaw exists in Backdrop CMS. This issue allows attackers to manipulate the Host header within password reset requests. Successful exploitation can lead to redirection to malicious...

6.1CVSS6.9AI score0.00213EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•18 views

Backdrop CMS 安全漏洞

Backdrop CMS is a content management system CMS from Backdrop CMS open source. A security vulnerability exists in Backdrop CMS version 1.32.1 that stems from improper manipulation of the Host header in a password reset request, which could lead to redirection to a malicious domain and session...

6.1CVSS6.5AI score0.00213EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-5906

Malware in sbrugna...

6.1CVSS6.3AI score0.00846EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-9494

Malware in sbrugna...

7.2CVSS7AI score0.01499EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2019-9495

Malware in sbrugna...

4.8CVSS5.2AI score0.00552EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-5908

Malware in sbrugna...

9.8CVSS9.5AI score0.02601EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-9493

Malware in sbrugna...

4.8CVSS5.2AI score0.00552EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2019-5907

Malware in sbrugna...

6.1CVSS6.3AI score0.00793EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2019-9492

Malware in sbrugna...

4.8CVSS5.2AI score0.00552EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-2012

Malware in sbrugna...

4.8CVSS5.1AI score0.00741EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-52299

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00291EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2025-7812

Malicious code in bioql PyPI...

6.4CVSS6.6AI score0.00236EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•8 views

EUVD-2025-7810

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00297EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-7813

Malicious code in bioql PyPI...

6.4CVSS6.6AI score0.00236EPSS
SaveExploits0References1
Rows per page
Query Builder