php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: root@kitploit: python code.py file.php -this will sc...

CVE-2023-36085_SISQUALWFM-Host-Header-Injection

CVE-2023-36085 Vulnérabilité d'injection d'en-tête d'hôte SISQUALWFM Ce dépôt contient des informations relatives à une vulnérabilité d'injection d'en-tête d'hôte découverte dans SISQUALWFM version 7.1.319.103, qui permet à un attaquant de manipuler les liens de pages web ou de rediriger les...

RCE

CVE-2022-31814 वेबएप बग root@kitploit: import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning parser =...

XSSTracer

XSSTracer v1.3 بواسطة 1N3 @CrowdShield https://crowdshield.com XSSTracer هو سكربت بايثون صغير يفحص خوادم الويب البعيدة بحثًا عن Clickjacking و Cross-Frame Scripting و Cross-Site Tracing و Host Header Injection. root@kitploit: Usage: ./xsstracer...

CVE-2021-27404

प्रमाणित होस्ट हेडर इंजेक्शन - Askey इंटरनेट फाइबर मॉडेम विक्रेता: Askey सॉफ़्टवेयर संस्करण: BRSVg11.11RTFTEF001V6.54V014 मॉडल: RTF8115VW संवेदनशील हेडर: Host अन्य मॉडल/संस्करण में परीक्षण नहीं किया गया। प्रभाव: एक हमलावर इस भेद्यता का लाभ उठाकर उपयोगकर्ता को नकली लॉगिन पृष्ठ पर पुनर्निर्देशित कर...

ExponentCMS <= 2.6 - Host Header Injection

An HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponentconstants.php. A modified HTTP header can change links on the webpage to an arbitrary value,leading to a possible attack vector for MITM. id: CVE-2021-38751 info: name: ExponentCMS = 2.6 - Host Header Injection author:...

CVE-2022-24181

CVE-2022-24181 و CVE-2022-26616. كلاهما ربما متطابقان ثغرة في Open-journal-system XSS عبر حقن رأس المضيف وسرقة رمز إعادة تعيين كلمة المرور لمستخدم آخر خطوات إعادة الإنتاج: 1. اذهب إلى هذا الموقع: https://who's-using-ojs-software.com 2. وقم بالتقاط هذا الطلب في Burp، وأرسله إلى Repeater. 3. أضف هذ...

CVE-2025-22381

CVE-2025-22381: एगी में होस्ट हेडर इंजेक्शन एगी ओपन-सोर्स प्रोजेक्ट में खोजी गई होस्ट हेडर इंजेक्शन भेद्यता CVE-2025-22381 का विस्तृत विश्लेषण और प्रूफ-ऑफ-कॉन्सेप्ट। भेद्यता अवलोकन+ CVE ID: CVE-2025-22381 प्रकाशित: अक्टूबर 2025 MITRE असाइनमेंट सार्वजनिक रूप से खुलासा: फरवरी 2026 रिपोर्टर: अनास...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

CVE-2026-33149-PoC

CVE-2026-33149 — حقن ترويسة المضيف في Tandoor Recipes الملخص يضبط Tandoor Recipes قيمة ALLOWEDHOSTS = '' افتراضيًا في settings.py، مما يجعل Django يقبل أي قيمة في ترويسة Host الخاصة بـ HTTP دون تحقق. يستخدم التطبيق لتوليد عناوين URL مطلقة في سياقات متعددة حساسة أمنيًا. يمكن للمهاجم الذي يستطيع...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Injection d'en-tête Host menant à un contournement de l'authentification SAML dans AWS Auth Manager d'Apache Airflow Un attaquant peut injecter un en-tête Host malveillant dans le flux de connexion SAML, ce qui entraîne le pointage de l'URL du service de consommation d'assertio...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898: Xiaomi Mi Router 4A Gigabit - होस्ट हेडर इंजेक्शन के माध्यम से SSRF -orange सारांश Xiaomi Mi Router 4A Gigabit Edition में एक सर्वर-साइड रिक्वेस्ट फॉरजरी SSRF भेद्यता मौजूद है। राउटर का वेब इंटरफ़ेस HTTP Host हेडर को मान्य करने में विफल रहता है, जिससे एक अनधिकृत हमलावर राउटर को...

CVE-2026-56709

Grav before 3.9.2 is vulnerable to a Host header injection in the sendInvitationEmail() function. When constructing token-bearing invitation links, the unvalidated Host header allows an attacker to poison the link and redirect users to an attacker-controlled domain . This bypasses the require_tru...

CVE-2026-56709 Grav before 3.9.2 Host Header Injection via sendInvitationEmail

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

EUVD-2026-65207

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

Impact Pipelines-as-Code installations using the GitHub App provider are vulnerable to GitHub App credential exfiltration through the webhook endpoint. Affected versions accepted the X-GitHub-Enterprise-Host request header as the GitHub Enterprise API host during GitHub App token generation. For...

CVE-2026-15689

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in defaultemailpasswordreset and defaultwelcomesend. Both default emails emit a link of the form $base/login/$code, whose authority comes from the request Host header,...

CVE-2026-15689 Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in defaultemailpasswordreset and defaultwelcomesend. Both default emails emit a link of the form $base/login/$code, whose authority comes from the request Host header,...

CVE-2026-15689

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in defaultemailpasswordreset and defaultwelcomesend. Both default emails emit a link of the form $base/login/$code, whose authority comes from the request Host header,...

PT-2026-73031

Name of the Vulnerable Software and Affected Versions Dancer2::Plugin::Auth::Extensible versions prior to 0.714 Description Password reset link poisoning is possible via the request Host header in the default email password reset and default welcome send functions. Both default emails generate a...