Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/11/30 1:04 a.m.•23 views

CVE-2025-13434

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

7.5CVSS6AI score0.00463EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/20 3:30 p.m.•11 views

EUVD-2025-198257

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

6.9CVSS5.7AI score0.00463EPSS
SaveExploits1References5
OSV
OSV
•added 2025/11/20 3:17 p.m.•15 views

CVE-2025-13434

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

7.5CVSS5.5AI score0.00463EPSS
SaveExploits1References4
NVD
NVD
•added 2025/11/20 3:17 p.m.•20 views

CVE-2025-13434

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

7.5CVSS0.00463EPSS
SaveExploits1References4
CVE
CVE
•added 2025/11/20 1:02 a.m.•32 views

CVE-2025-13434

CVE-2025-13434 affects the jameschz Hush Framework 2.0. The issue lies in the HTTP Host Header Handler implemented in Hush\hush-lib\hush\Util.php, where manipulation of the argument $_SERVER['HOST'] causes improper neutralization of HTTP headers for scripting syntax. Exploitation is described as ...

7.5CVSS5AI score0.00463EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/11/20 1:02 a.m.•31 views

CVE-2025-13434 jameschz Hush Framework HTTP Host Header Util.php http headers for scripting syntax

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

6.9CVSS0.00463EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/11/20 1:02 a.m.•7 views

CVE-2025-13434 jameschz Hush Framework HTTP Host Header Util.php http headers for scripting syntax

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

6.9CVSS5AI score0.00463EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/11/20 12:00 a.m.•15 views

Hush Framework 安全漏洞

Hush Framework is a web application framework by the individual developer of james.huang. A security vulnerability exists in Hush Framework version 2.0, which stems from improperly neutralized HTTP host headers and could lead to remote attacks...

7.5CVSS5.5AI score0.00463EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/20 12:00 a.m.•1 views

CVE-2025-13434: Improper Neutralization of HTTP Headers for Scripting Syntax

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

7.5CVSS5.3AI score0.00463EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/20 12:00 a.m.•17 views

PT-2025-47545

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hushhush-libhushUtil.php of the component HTTP Host Header Handler. This manipulation of the argument $ SERVER'HOST' causes improper neutralization of http headers for scripting...

6.9CVSS6.1AI score0.00463EPSS
SaveExploits1References4
Rows per page
Query Builder