EUVD-2024-36076

Malicious code in bioql PyPI...

EUVD-2025-20280

Malicious code in bioql PyPI...

EUVD-2022-49084

Malicious code in bioql PyPI...

EUVD-2022-28640

Malicious code in bioql PyPI...

EUVD-2025-19527

Malicious code in bioql PyPI...

CVE-2025-56266

A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL...

CVE-2025-56266

A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL...

CVE-2025-56266

A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL...

CVE-2025-56266

A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL...

Avigilon ACM 安全漏洞

Avigilon ACM is a physical access control system from Avigilon USA. A security vulnerability exists in Avigilon ACM version v7.10.0.20, which originates from host header injection and could lead to the execution of arbitrary code...

PT-2025-36485

Name of the Vulnerable Software and Affected Versions: Avigilon ACM version 7.10.0.20 Description: A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL. Recommendations: At the moment, there is no information about...

CVE-2025-56266

CVE-2025-56266 affects Avigilon ACM v7.10.0.20. The connected nuclei template confirms a Host Header Injection vulnerability that enables arbitrary code execution via a crafted HTTP request (crafted URL). Root cause is host header manipulation affecting request handling in Avigilon ACM, enabling ...

CVE-2025-56266

A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL...

CVE-2024-13068 Host Header Injection in Akinsoft's LimonDesk

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

CVE-2024-13068

CVE-2024-13068 describes an Origin Validation Error in Akinsoft LimonDesk that allows Forceful Browsing. Affected versions are s1.02.14 through before v1.02.17. The issue stems from improper origin validation, enabling access to restricted resources without proper authorization. CVSS v3.1 base sc...

CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

CVE-2024-12973

CVE-2024-12973 describes an Origin Validation Error in Akinsoft OctoCloud that allows HTTP response splitting. Affected versions are s1.09.01 through before v1.11.01; the issue is mitigated by upgrading to v1.11.01 or later. The root cause is improper origin validation that permits crafted HTTP r...

Linux Distros Unpatched Vulnerability : CVE-2018-14774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, a...

CVE-2025-7777 Mirror-registry: host header injection in mirror-registry

The mirror-registry doesn't properly sanitize the host header HTTP header in HTTP request received, allowing an attacker to perform malicious redirects to attacker-controlled domains or phishing campaigns...

CVE-2025-50578

LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically X-Forwarded-Host and Referer. An unauthenticated remote attacker can manipulate these headers to perform Host Header Injection and Open Redirect attacks. This allows the loading...