Lucene search
+L

3710 matches found

Hacker One
Hacker One
added 2022/07/07 3:14 p.m.2041 views

XVIDEOS: Host Header Injection Attack - www.xnxx.com

Host Header Injection Attack - www.xnxx.com An attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. This header specifi...

0.5AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/07/06 12:0 a.m.5 views

CVE-2022-34306

IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. I...

5.5CVSS5.8AI score0.00698EPSS
SaveExploits0References4Affected Software2
Hacker One
Hacker One
added 2022/07/04 5:31 a.m.7 views

Enjin: Host header injection leads to account takeover

Vulnerability description not provided...

7.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/06/28 2:15 p.m.3 views

CVE-2022-30562

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page...

4.7CVSS5.8AI score0.0068EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/28 2:15 p.m.5 views

CVE-2022-30562

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page...

4.7CVSS5.8AI score0.0068EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/22 1:15 p.m.6 views

CVE-2022-23079

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...

6.8CVSS5.9AI score0.01315EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2022/06/22 1:15 p.m.21 views

CVE-2022-23079

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...

6.8CVSS0.01315EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/22 1:15 p.m.18 views

Design/Logic Flaw

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...

6.8CVSS7.3AI score0.01315EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/22 1:5 p.m.28 views

CVE-2022-23079 motoradmin - host header Injection in the reset password functionality

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...

7.3AI score0.01315EPSS
SaveExploits1References2
CVE
CVE
added 2022/06/22 1:5 p.m.66 views

CVE-2022-23079

CVE-2022-23079 affects motor-admin versions 0.0.1 through 0.2.56 and is caused by host header injection in the password reset functionality, allowing a malicious actor to send a fake password reset email to a victim. Affected product: motor-admin (open source) — details consistently describe the ...

6.8CVSS7AI score0.01315EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/06/22 1:5 p.m.21 views

CVE-2022-23079 motoradmin - host header Injection in the reset password functionality

In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim...

6.8CVSS6AI score0.01315EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/06/22 12:0 a.m.5 views

motor-admin 安全漏洞

motor-admin is a code-free management panel and business intelligence tool from Motor Admin open source. A security vulnerability exists in motor-admin versions 0.0.1 through 0.2.56, which stems from the vulnerability of the host header in the password reset function. An attacker could use this...

6.8CVSS5.7AI score0.01315EPSS
SaveExploits1References3
NVD
NVD
added 2022/06/02 2:15 p.m.33 views

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

6.1CVSS0.00578EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/02 2:15 p.m.6 views

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

6.1CVSS5.8AI score0.00578EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.6 views

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

6.1CVSS6.4AI score0.00578EPSS
SaveExploits0References2
Prion
Prion
added 2022/06/02 2:15 p.m.24 views

Design/Logic Flaw

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

5.8CVSS6.3AI score0.00578EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.9 views

Netapp E-Series SANtricity OS Controller Software 输入验证错误漏洞

Netapp E-Series SANtricity OS Controller Software is a disk array OS controller software from Netapp, Inc. A security vulnerability exists in Netapp E-Series SANtricity OS Controller Software versions 11.x through 11.70.2, which stems from vulnerability to host header injection attacks. An attack...

6.1CVSS6.4AI score0.00578EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/06/01 1:54 p.m.43 views

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

6.6AI score0.00578EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/01 1:54 p.m.80 views

CVE-2022-23237

CVE-2022-23237 affects NetApp E-Series SANtricity OS Controller Software, versions 11.x up to 11.70.2. The root cause is a host header injection vulnerability in the software that could allow an attacker to redirect users to malicious websites. Impact is described as partial confidentiality/integ...

6.1CVSS6.3AI score0.00578EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2022/05/19 12:0 a.m.32 views

Unspecified Vulnerability in IBM DataPower Gateway (CNVD-2022-41642)

IBM DataPower Gateway is a suite of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interfaces APIs, web, service-oriented architecture SOA, B2B and cloud workloads. The platform protects, integrates and optimizes access across...

6.1CVSS6.5AI score0.00547EPSS
SaveExploits0References1
Rows per page
Query Builder