123 matches found
CVE-2021-47844 Xmind 2020 - Persistent Cross-Site Scripting
Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...
CVE-2021-47844: Improper Neutralization of Input During Web Page Generation
Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...
[SECURITY] Fedora 43 Update: nginx-mod-fancyindex-0.5.2-13.fc43
The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...
Exploit for Deserialization of Untrusted Data in Facebook React
react2shellburp CVE-2025-55182 Burp Suite extension for ide...
Custom HTTP Header Detected
This is an informational notice that the scanner was able to detect custom HTTP headers in the target application's responses. No source data...
EUVD-2019-2757
Malware in sbrugna...
EUVD-2025-1783
Malicious code in bioql PyPI...
EUVD-2025-16398
Malicious code in bioql PyPI...
EUVD-2025-8671
Malicious code in bioql PyPI...
EUVD-2025-8670
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-3767
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless ...
GO-2025-3722 Fabio allows HTTP clients to manipulate custom headers it adds in github.com/fabiolb/fabio
Fabio allows HTTP clients to manipulate custom headers it adds in github.com/fabiolb/fabio...
CVE-2025-48865
Fabio (fabio) is an HTTP(S) and TCP router for deploying Consul-managed apps. Prior to version 1.6.6, it mishandles hop-by-hop headers, allowing clients to remove or modify X-Forwarded headers (e.g., X-Forwarded-Host, X-Forwarded-Port) that Fabio injects when routing to backends. The attack relie...
CVE-2025-48865 Fabio allows HTTP clients to manipulate custom headers it adds
Fabio is an HTTPS and TCP router for deploying applications managed by consul. Prior to version 1.6.6, Fabio allows clients to remove X-Forwarded headers except X-Forwarded-For due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP headers like X-Forwarded-Host and...
GHSA-Q7P4-7XJV-J3WF Fabio allows HTTP clients to manipulate custom headers it adds
Summary Fabio allows clients to remove X-Forwarded headers except X-Forwarded-For due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP headers like X-Forwarded-Host and X-Forwarded-Port when routing requests to backend applications. Since the receiving application should...
Fabio allows HTTP clients to manipulate custom headers it adds
Summary Fabio allows clients to remove X-Forwarded headers except X-Forwarded-For due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP headers like X-Forwarded-Host and X-Forwarded-Port when routing requests to backend applications. Since the receiving application should...
CVE-2025-28097
OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...
CVE-2025-28096
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...
