urlbuster

██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

CVE-2021-27404

Authenticated Host Header Injection - Askey Internet Fiber Modem Vendor: Askey Software Version: BRSVg11.11RTFTEF001V6.54V014 Model: RTF8115VW Vulnerable Header: Host Not tested in other model/version. Impact: An attacker could take advantege on that vulnerability to redirect user to a fake Login...

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: python code.py file.php -this will scan one file...

CVE-2018-13257

Blackboard Learn CAS Ticket Host Header Spoofing An authentication module within Blackboard Learn is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation. A CAS service ticket is intended for only a specific service , but Blackboard Learn do...

pfBlockerNg-CVE-2022-40624

pfBlockerNg-CVE-2022-40624 Background pfBlockerNG is the Next Generation of pfBlocker with the following features: 1. Manage IPv4/v6 List Sources into 'Deny, Permit or Match' formats. 2. GeoIP database by MaxMind Inc. GeoLite2 Free version. 3. De-Duplication, Suppression, and Reputation...

cloudfrunt

CloudFrunt CloudFrunt is a tool for identifying misconfigured CloudFront domains. Background CloudFront is a Content Delivery Network CDN provided by Amazon Web Services AWS. CloudFront users create "distributions" that serve content from specific sources an S3 bucket, for example. Each CloudFron...

CVE-2022-22972

CVE-2022-22972 POC for CVE-2022-22972 affecting VMware Workspace ONE, vIDM, and vRealize Automation 7.6. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

RCE

CVE-2022-31814 WebApp bug import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning parser = argparse.ArgumentParserdescription="pfBlockerNG =...

CVE-2025-25198-PoC

CVE-2025-25198-PoC Preuve de concept pour CVE-2025-25198, un problème d'empoisonnement de l'en-tête Host affectant les flux de réinitialisation de mot de passe de Mailcow. Le script démarre un écouteur HTTPS local sur le port 443, obtient automatiquement un jeton CSRF valide, envoie la séquence d...

CVE-2022-24181

CVE-2022-24181 and CVE-2022-26616. both are probably same Open-journal-system-Vulnerability XSS via Host Header injection and Steal Password Reset Token of another user Step to reproduce: 1. Go to this site: https://who's-using-ojs-software.com 2. And capture this request in burp , and send to...

CVE-2026-34835-Black-box-Analysis

Этот репозиторий предоставляет анализ безопасности методом чёрного ящика уязвимости CVE-2026-34835 с точки зрения внешнего пентестера. Цель состоит не в обратной разработке уязвимости, а в документировании того, как специалист по безопасности может выявить, подтвердить и оценить её влияние в ходе...

XSSTracer

XSSTracer v1.3 par 1N3 @CrowdShield https://crowdshield.com XSSTracer est un petit script python qui vérifie sur les serveurs web distants la présence de Clickjacking, de Cross-Frame Scripting, de Cross-Site Tracing et d'injection d'en-tête Host. Usage: ./xsstracer...

Starlette - Improper Validation of Unsafe Equivalence in Input

A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...

LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass

LiteLLM Proxy before 1.84.0 derives its public-route authorization check from a URL reconstructed with the unvalidated Host header. A Host value containing a fragment can make a protected request appear to target the public root route, bypassing the API-key check. Version 1.84.0 derives the route...

Astro SSR - Server-Side Request Forgery

Astro before 5.17.3 and @astrojs/node before 9.5.4 are vulnerable to full-read SSRF due to improper Host header validation in error page rendering, allowing attackers to redirect requests and access internal resources. id: CVE-2026-25545 info: name: Astro SSR - Server-Side Request Forgery author:...

Plone Docker - Host Header Injection

Plone Docker Official Image 5.2.13 5221 is vulnerable to Host Header Injection due to improper validation of input by the HOST headers. This can lead to Cross-Site Scripting XSS attacks when the malicious Host header value is reflected in the response. id: CVE-2024-23055 info: name: Plone Docker ...

ExponentCMS <= 2.6 - Host Header Injection

An HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponentconstants.php. A modified HTTP header can change links on the webpage to an arbitrary value,leading to a possible attack vector for MITM. id: CVE-2021-38751 info: name: ExponentCMS = 2.6 - Host Header Injection author:...

CVE-2026-63292

⚠️ CVE-2026-63292 — Уязвимость безопасности Apache HTTP Server 🔐 --- 🔎 Обзор CVE-2026-63292 — это уязвимость переполнения буфера в стеке, затрагивающая модуль modvhostalias Apache HTTP Server. Проблема может быть вызвана при определённых конфигурациях сервера, связанных с чрезмерно большими...

zaphoster

zaphoster Исправление принудительной установки заголовка Host в zaproxy добавьте скрипт ZAP/zap-hoster.py на вкладку httpsender и запустите app.py $ sudo pip3 install flask requests $ python3 app.py GET https://knassar702.github.io/ HTTP/1.1 Host: knassar702.github.io User-agent: Firefox test For...

CVE-2026-48710

CVE-2026-48710 Принцип: Starlette — это легковесный Python ASGI-фреймворк с открытым исходным кодом. Причина в том, что при обработке структуры данных url фреймворк Starlette доверяет значению host, отправленному клиентом, и напрямую подставляет его в переменную url для последующей проверки прав...