Lucene search
+L

289 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•5 views

CVE-2026-5124: Improper Access Control

A security vulnerability has been detected in osrg GoBGP up to 4.3.0. Affected is the function BGPHeader.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component BGP Header Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The...

6.3CVSS4AI score0.00287EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/26 3:10 p.m.•33 views

CVE-2026-1406

A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirec...

5.1CVSS5.5AI score0.00259EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/25 12:15 p.m.•27 views

CVE-2026-1406

A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirec...

5.1CVSS0.00259EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/01/25 12:02 p.m.•11 views

CVE-2026-1406 lcg0124 BootDo Host Header AccessControlFilter.java redirectToLogin

A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirec...

5.1CVSS5.1AI score0.00259EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/25 12:02 p.m.•12 views

CVE-2026-1406

A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirec...

5.1CVSS4.8AI score0.00259EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/01/25 12:02 p.m.•35 views

EUVD-2026-4641

A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirec...

5.1CVSS4.8AI score0.00259EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/25 12:00 a.m.•8 views

CVE-2026-1406: URL Redirection to Untrusted Site

A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirec...

5.1CVSS5.1AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/25 12:00 a.m.•34 views

PT-2026-4648

A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirec...

5.1CVSS5.2AI score0.00259EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/30 9:02 a.m.•9 views

CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect

A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...

5.1CVSS5AI score0.00222EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/12/30 9:02 a.m.•54 views

CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect

A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...

5.1CVSS0.00222EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2025/12/30 9:02 a.m.•22 views

CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect

A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...

5.1CVSS5.5AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•12 views

CVE-2025-15241: URL Redirection to Untrusted Site

A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...

5.1CVSS5AI score0.00222EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/29 6:30 p.m.•26 views

EUVD-2025-205599

A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack-based buffer overflow. It is possible to launch the attack...

10CVSS8.9AI score0.0118EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2025/12/29 4:15 p.m.•35 views

CVE-2025-15194

A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack-based buffer overflow. It is possible to launch the attack...

9.8CVSS8.8AI score0.0118EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/12/29 3:32 p.m.•16 views

CVE-2025-15194 D-Link DIR-600 HTTP Header hedwig.cgi stack-based overflow

A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack-based buffer overflow. It is possible to launch the attack...

10CVSS8.8AI score0.0118EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•26 views

D-Link DIR-600 security vulnerabilities

The D-Link DIR-600 is a wireless router from China AUO D-Link. A security vulnerability exists in the D-Link DIR-600 version 2.15WWb02 and prior versions, which stems from the incorrect manipulation of the parameter Cookie in the file hedwig.cgi of the component HTTP Header Handler, which could...

10CVSS8.6AI score0.0118EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•10 views

CVE-2025-15194: Stack-based Buffer Overflow

A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack-based buffer overflow. It is possible to launch the attack...

10CVSS8.9AI score0.0118EPSS
SaveExploits1References7
NVD
NVD
•added 2025/12/28 9:15 p.m.•21 views

CVE-2025-15154

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

6.9CVSS0.0025EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/12/28 9:02 p.m.•19 views

CVE-2025-15154 PbootCMS Header handle.php get_user_ip less trusted source

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

6.9CVSS5.8AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/12/28 9:02 p.m.•12 views

CVE-2025-15154 PbootCMS Header handle.php get_user_ip less trusted source

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

6.9CVSS5.5AI score0.0025EPSS
SaveExploits1References4
Rows per page
Query Builder