Known injection vulnerabilities

Known is a social publishing platform open-sourced by Known in the United States. A security vulnerability exists in Known v1.3.1 and below, which stems from the discovery of a vulnerability that allows an attacker to perform an account takeover via a host header injection attack...

CVE-2022-34306: Improper Neutralization of Input During Web Page Generation

IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. I...

CVE-2022-34914: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Webswing before 22.1.3 allows X-Forwarded-For header injection. The client IP address is associated with a variable in the configuration page. The clientIp variable can be used as an application startup argument. The X-Forwarded-For header can be manipulated by a client to store an arbitrary valu...

PT-2022-22117 · Ibm · Ibm Cics Tx Standard +1

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard and Advanced version 11.1 Description: The issue is caused by improper validation of input by the HOST headers, leading to HTTP header injection. This could allow an attacker to conduct various attacks against the...

PT-2022-22433

Name of the Vulnerable Software and Affected Versions Webswing versions prior to 20.1.16 Webswing versions prior to 20.2.19 Webswing versions prior to 21.1.8 Webswing versions prior to 21.2.12 Webswing versions prior to 22.1.3 Description The issue allows X-Forwarded-For header injection. The...

Webswing injection vulnerability

Webswing is a specialized web server from Webswing, Inc. for running Java Swing and JavaFX based applications in a web browser. A security vulnerability exists in Webswing versions prior to 22.1.3 that stems from allowing X-Forwarded-For header injection...

XVIDEOS: Host Header Injection Attack - www.xnxx.com

Host Header Injection Attack - www.xnxx.com An attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. This header specifi...

CVE-2022-34306

IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. I...

Enjin: Host header injection leads to account takeover

Vulnerability description not provided...

python: CRLF injection via HTTP request method in httplib/http.client

A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The highest threat fr...

Multiple Dahua products have vulnerabilities related to input validation errors

Dahua IPC-HFW2XXX and others are products of Dahua China.Dahua IPC-HFW2XXX is an IP camera.Dahua IPC-HDBW2XXX is a series of cameras.Dahua ASI7XXXX is a series of face recognition access controllers. A security vulnerability exists in multiple Dahua products, which can be exploited by an attacker...

CVE-2022-23079

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...

CVE-2022-23079

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...

CVE-2022-23079 motoradmin - host header Injection in the reset password functionality

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...

CVE-2022-23079

CVE-2022-23079 affects motor-admin versions 0.0.1 through 0.2.56 and is caused by host header injection in the password reset functionality, allowing a malicious actor to send a fake password reset email to a victim. Affected product: motor-admin (open source) — details consistently describe the ...

PT-2022-15835

Name of the Vulnerable Software and Affected Versions motor-admin versions 0.0.1 through 0.2.56 Description The issue concerns host header injection in the password reset functionality. A malicious actor can exploit this to send fake password reset emails to arbitrary victims. Recommendations For...

CVE-2022-23079: Improper Encoding or Escaping of Output

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...