4642 matches found
CVE-2022-34306
IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. I...
CVE-2022-33011
Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack...
CVE-2022-33011
Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack...
Design/Logic Flaw
Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack...
CVE-2022-33011
Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack...
CVE-2022-33011
CVE-2022-33011 affects Known (open-source social publishing platform). Multiple connected sources corroborate an account takeover via host header injection in v1.3.1 and earlier. Red Hat, Veracode and OSV entries describe the root cause as lack of validation in the password reset flow, notably in...
Known 注入漏洞
Known is a social publishing platform open-sourced by Known in the United States. A security vulnerability exists in Known v1.3.1 and below, which stems from the discovery of a vulnerability that allows an attacker to perform an account takeover via a host header injection attack...
Webswing 注入漏洞
Webswing is a specialized web server from Webswing, Inc. for running Java Swing and JavaFX based applications in a web browser. A security vulnerability exists in Webswing versions prior to 22.1.3 that stems from allowing X-Forwarded-For header injection...
PT-2022-22117 · Ibm · Ibm Cics Tx Standard +1
Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard and Advanced version 11.1 Description: The issue is caused by improper validation of input by the HOST headers, leading to HTTP header injection. This could allow an attacker to conduct various attacks against the...
XVIDEOS: Host Header Injection Attack - www.xnxx.com
Host Header Injection Attack - www.xnxx.com An attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. This header specifi...
CVE-2022-34306
IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. I...
Enjin: Host header injection leads to account takeover
Vulnerability description not provided...
python: CRLF injection via HTTP request method in httplib/http.client
A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The highest threat fr...
多款Dahua产品输入验证错误漏洞
Dahua IPC-HFW2XXX and others are products of Dahua China.Dahua IPC-HFW2XXX is an IP camera.Dahua IPC-HDBW2XXX is a series of cameras.Dahua ASI7XXXX is a series of face recognition access controllers. A security vulnerability exists in multiple Dahua products, which can be exploited by an attacker...
CVE-2022-23079
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...
CVE-2022-23079
CVE-2022-23079 affects motor-admin versions 0.0.1 through 0.2.56 and is caused by host header injection in the password reset functionality, allowing a malicious actor to send a fake password reset email to a victim. Affected product: motor-admin (open source) — details consistently describe the ...
CVE-2022-23079 motoradmin - host header Injection in the reset password functionality
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...
CVE-2022-23237
E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...