1684 matches found
CVE-2025-61541
Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality forgotsend.cgi. The reset link sent to users is constructed using the HTTP Host header via getwebminemailurl. An attacker can manipulate the Host header to inject a malicious domain into the reset email. If ...
CVE-2025-61541
Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality forgotsend.cgi. The reset link sent to users is constructed using the HTTP Host header via getwebminemailurl. An attacker can manipulate the Host header to inject a malicious domain into the reset email. If ...
CVE-2025-61541
The Webmin hosting control panel (version 2.510 ) is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi ). The root cause is an unvalidated HTTP Host header used by the get_webmin_email_url() function to construct reset links. An attacker can manipulate thi...
CVE-2025-61541: Improper Access Control
Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality forgotsend.cgi. The reset link sent to users is constructed using the HTTP Host header via getwebminemailurl. An attacker can manipulate the Host header to inject a malicious domain into the reset email. If ...
Webmin 安全漏洞
Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 2.510, which stems from an unvalidated HTTP Host header in the password reset function, which could allow an attacker to...
CVE-2025-61541
Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality forgotsend.cgi. The reset link sent to users is constructed using the HTTP Host header via getwebminemailurl. An attacker can manipulate the Host header to inject a malicious domain into the reset email. If ...
PT-2025-42477
Name of the Vulnerable Software and Affected Versions Webmin version 2.510 Description Webmin version 2.510 has a flaw in the password reset functionality forgot send.cgi. The reset link sent to users is created using the HTTP Host header through the get webmin email url function. An attacker can...
EUVD-2001-1177
Malware in sbrugna...
EUVD-2007-1273
Malware in sbrugna...
EUVD-2007-5047
Malware in sbrugna...
EUVD-2002-2338
Malware in sbrugna...
EUVD-2001-0222
Malware in sbrugna...
EUVD-2002-1653
Malware in sbrugna...
EUVD-2021-19020
Malware in sbrugna...
EUVD-2020-29666
Malware in sbrugna...
EUVD-2004-0581
Malware in sbrugna...
EUVD-2021-19018
Malware in sbrugna...