CVE-2025-12543-Fix-for-Wildfly

WildFly 11.0.0.Final Base Image — CVE-2025-12543 Patch Overview This repository provides a Docker base image built on WildFly 11.0.0.Final with a backported fix for CVE-2025-12543 , a critical Host header validation vulnerability in Undertow. The image is intended to be provided to colleagues as ...

httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2026-112085

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the Ho...

CVE-2026-114348

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated open-editor endpoint validates the Host header with a regular expression meant for browser Origin schemes, so a Host value...

CVE-2026-114348

A flaw was found in webpack-dev-server. An unauthenticated remote attacker can exploit improper Host header validation in the open-editor endpoint to obtain sensitive technical information. By sending a request with a specially crafted Host header, the attacker triggers an internal server error...

CVE-2026-114348

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated open-editor endpoint validates the Host header with a regular expression meant for browser Origin schemes, so a Host value...

EUVD-2026-108109

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated open-editor endpoint validates the Host header with a regular expression meant for browser Origin schemes, so a Host value...

CVE-2026-114348 webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated open-editor endpoint validates the Host header with a regular expression meant for browser Origin schemes, so a Host value...

CVE-2026-114348

The webpack-dev-server development server (versions 5.1.0 to 5.2.6 and 6.0.0 ) is vulnerable to information disclosure via an unauthenticated open-editor endpoint . The root cause is a Host header validation bypass where values starting with file: or specific extension schemes short-circuit secur...

CVE-2026-112085 webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the Ho...

CVE-2026-112085

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the Ho...

CVE-2026-112085

The webpack-dev-server development server is vulnerable to cross-origin WebSocket access in versions before 5.2.7 and in version 6.0.0 . The root cause is that the server forwards non-HMR WebSocket upgrade requests to a proxy target without validating Host or Origin headers, bypassing allowedHost...

EUVD-2026-108108

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the Ho...

CVE-2026-112085 webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the Ho...

CVE-2026-49468-LiteLLM-Auth-Bypass

CVE-2026-49468 — LiteLLM Unauthenticated Auth Bypass via Host-Header Route Confusion Pre-authentication authentication/authorization bypass in the LiteLLM proxy BerriAI. A single crafted Host header makes the proxy evaluate its auth decision against a public health route while FastAPI still...

starlette-host-header-lab

Starlette Host-Header URL Confusion Lab X41-2026-002 A self-contained, containerized training lab reproducing the Starlette authentication-bypass vulnerability disclosed by X41 D-Sec. Advisory: X41-2026-002 GHSA: GHSA-86qp-5c8j-p5mr CWE: 436 — Interpretation Conflict / Untrusted Input in Function...

BadHost-CVE-2026-48710-Exploit

BadHost — CVE-2026-48710 Scanner Detection-only scanner for the BadHost auth-bypass in Starlette / FastAPI — where auth middleware reads request.url.path instead of request.scope"path", allowing a crafted Host header to smuggle an allowlisted path and bypass authentication. GET /admin HTTP/1.1...

CVE-2025-0324-axis-vapix-privesc

CVE-2025-0324 — Root Cause Analysis A client-controlledHost header as a root-group backdoor in the AXIS OS VAPIX Device Configuration framework. %20%2F%208.8%20High%20\NVD-b3261e TL;DR Axis Communications disclosed CVE-2025-0324 on 2025-06-02 as a critical CVSS 9.4 privilege-escalation flaw in th...

cve-2024-34351-demo

CVE-2024-34351 Demo Minimal Next.js 14.0.0 application for demonstrating CVE-2024-34351 -- a Server-Side Request Forgery SSRF vulnerability in Next.js Server Actions. Discovered by Adam Kues and Shubham Shah at Assetnote. Fixed in Next.js 14.1.1. How the vulnerability works When a Server Action...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...