-cve-2021-45232

Get Full Article Soon On https://Hellofhackers.com...

CVE-2025-25198

CVE-2024-25198 mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the Host HTTP header to generate a password reset link pointing to an attacker-controll...

CVE-2026-33149-PoC

CVE-2026-33149 — Host Header Injection in Tandoor Recipes Summary Tandoor Recipes sets ALLOWEDHOSTS = '' by default in settings.py, causing Django to accept any value in the HTTP Host header without validation. The application uses to generate absolute URLs in multiple security-sensitive contexts...

CVE-2026-61589

djust , a Phoenix LiveView-style reactive server-side rendering library for Django, had a tenant resolution flaw in versions prior to 1.0.7 . The WebSocket handle_mount and ViewRuntime._build_request rebuilt the HttpRequest via RequestFactory().get(...) without an HTTP_HOST header, causing reques...

tenda-hg10-rce

CVE-2026-1689 Summary A command injection vulnerability exists in the Tenda HG10 router. It occurs in the formLogin endpoint due to improper handling of the Host parameter. No authentication credentials are verified as this executes before the check. User input from the Host header is directly...

CVE-2025-12543-Fix-for-Wildfly

Imagen Base WildFly 11.0.0.Final — Parche CVE-2025-12543 Resumen Este repositorio proporciona una imagen base Docker construida sobre WildFly 11.0.0.Final con una corrección retroportada para CVE-2025-12543 , una vulnerabilidad crítica de validación del encabezado Host en Undertow. La imagen está...

CVE-2024-25170-Mezzanine-v6.0.0

Producto: Mezzanine CMS Versión: v6.0.0 Fecha de descubrimiento: 10.01.2024. Fecha de reporte: 10.01.2024. Tipo de vulnerabilidad: Control de Acceso Incorrecto. CVE ID: CVE-2024-25170 Descripción: Un problema en Mezzanine v6.0.0 permite a los atacantes eludir los controles de acceso manipulando e...

CVE-2018-18778

CVE-2018-18778 - ACME minihttpd Lectura Arbitraria de Archivos CVE-2018-18778 es una vulnerabilidad de seguridad que afecta a ACME minihttpd un servidor web ligero. La vulnerabilidad permite a atacantes remotos leer archivos arbitrarios en el servidor. Fue divulgada públicamente en octubre de 201...

@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

@zereight/mcp-gitlab exposes its Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim's local MCP listener while preserving an attacker-controlled Host and Origin. The server accepts those...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in http-proxy-middleware

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in http-proxy-middleware Vulnerability Details CVEID:CVE-2026-55602 DESCRIPTION: http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middleware documents...

CVE-2021-23017

CVE-2021-23017 PoC Scanner NGINX DNS Overflow Vulnerability Check - CVE-2021-23017 PoC Este script en Python verifica si un servidor nginx es potencialmente vulnerable a la vulnerabilidad crítica CVE-2021-23017 , que afecta al resolver DNS integrado en nginx y puede provocar un desbordamiento de...

CVE-2026-72744-poc

CVE-2026-72744: Nuxt Chrome DevTools エンドポイントの情報漏えい PoC English version 概要 このリポジトリは、Nuxt 開発サーバーの Chrome DevTools workspace エンドポイントに存在する情報漏えい脆弱性 CVE-2026-72744 の Proof of Concept PoC です。 脆弱な開発サーバーは、接続元がローカルかどうかを TCP peer address ではなく、 攻撃者が指定できる Host などの HTTP ヘッダーで判定します。開発サーバーが 0.0.0.0 に bind...

CVE-2026-91966 AVideo through 29.0 Unauthenticated SSRF via Host Header

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

EUVD-2026-78642

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

CVE-2026-91966

AVideo through 29.0 contains an unauthenticated server-side request forgery (SSRF) vulnerability in the check_site_availability function. The function accepts attacker-controlled HTTP Host headers , allowing an unauthenticated attacker to send crafted requests to submitIndex.php or ajax.php with ...

CVE-2026-91966 AVideo through 29.0 Unauthenticated SSRF via Host Header

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

CVE-2026-54167 Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events containing an installation.id, before...

CVE-2026-54182

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 4.1.70, 5.6.2, 6.8.13, and 7.0.36, Backpack\CRUD\Stats::makeCurlRequest in src/Stats.php is reached from...

CVE-2026-54182 backpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 4.1.70, 5.6.2, 6.8.13, and 7.0.36, Backpack\CRUD\Stats::makeCurlRequest in src/Stats.php is reached from...

CVE-2026-54182 backpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 4.1.70, 5.6.2, 6.8.13, and 7.0.36, Backpack\CRUD\Stats::makeCurlRequest in src/Stats.php is reached from...