CVE-2026-35507

Shynet before 0.14.0 allows Host header injection in the password reset flow...

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

EUVD-2026-18568

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

EUVD-2026-18566

Shynet before 0.14.0 allows Host header injection in the password reset flow...

CVE-2026-35507

Shynet before 0.14.0 allows Host header injection in the password reset flow...

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

CVE-2026-35508

CVE-2026-35508 affects Shynet prior to version 0.14.0. The vulnerability is an XSS in the urldisplay and iconify template filters, caused by improper handling in the template rendering paths. The CVSS3.1 vector (AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) yields a base score of 5.4 (Medium) with network...

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

CVE-2026-35507

Shynet before 0.14.0 allows Host header injection in the password reset flow...

CVE-2026-35507

Shynet before 0.14.0 allows Host header injection in the password reset flow...

CVE-2026-35507

CVE-2026-35507 affects Shynet before version 0.14.0. The issue is a Host header injection flaw in the password reset flow, with a CVSS 3.1 base score of 6.4 (Network, High impact on integrity; Low on confidentiality and availability; User interaction required). Root cause is insecure Host header ...

CVE-2026-35507

Shynet before 0.14.0 allows Host header injection in the password reset flow...

shynet 跨站脚本漏洞

Shynet is a self-hosted website analysis tool developed by R. Miles McCain. Versions of Shynet prior to 0.14.0 contained a cross-site scripting vulnerability, which originated from the urldisplay and iconify template filters having cross-site scripts...

shynet 安全漏洞

Shynet is a self-hosted website analysis tool developed by R. Miles McCain. Versions of Shynet prior to 0.14.0 contained security vulnerabilities, which were caused by a header injection vulnerability in the password reset process...

PT-2026-29970

Shynet before 0.14.0 allows Host header injection in the password reset flow...

PT-2026-29971

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...