CVE-2022-24181

CVE-2022-24181 et CVE-2022-26616. Les deux sont probablement identiques. Open-journal-system-Vulnerability XSS via l'injection d'en-tête Host et vol du jeton de réinitialisation de mot de passe d'un autre utilisateur Étapes pour reproduire : 1. Aller sur ce site :...

CVE-2023-36085_SISQUALWFM-Host-Header-Injection

CVE-2023-36085 Уязвимость внедрения заголовка Host в SISQUALWFM Этот репозиторий содержит информацию об уязвимости внедрения заголовка Host, обнаруженной в SISQUALWFM версии 7.1.319.103, которая позволяет злоумышленнику манипулировать ссылками на веб-странице или перенаправлять пользователей на...

CVE-2021-27404

Injection d'en-tête Host authentifiée - Modem fibre Internet Askey Vendeur : Askey Version logicielle : BRSVg11.11RTFTEF001V6.54V014 Modèle : RTF8115VW En-tête vulnérable : Host Non testé dans d'autres modèles/versions. Impact : Un attaquant pourrait profiter de cette vulnérabilité pour rediriger...

CVE-2025-22381

CVE-2025-22381 : Injection d'en-tête Host dans Aggie Analyse détaillée et Preuve de Concept pour CVE-2025-22381, une vulnérabilité d'injection d'en-tête Host découverte dans le projet open-source Aggie. Aperçu de la vulnérabilité+ ID CVE : CVE-2025-22381 Publié : Octobre 2025 attribution MITRE...

RCE

CVE-2022-31814 Уязвимость веб-приложения root@kitploit: import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning parser =...

XSSTracer

XSSTracer v1.3 par 1N3 @CrowdShield https://crowdshield.com XSSTracer est un petit script python qui vérifie sur les serveurs web distants la présence de Clickjacking, de Cross-Frame Scripting, de Cross-Site Tracing et d'injection d'en-tête Host. root@kitploit: Usage: ./xsstracer...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

ExponentCMS <= 2.6 - Host Header Injection

An HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponentconstants.php. A modified HTTP header can change links on the webpage to an arbitrary value,leading to a possible attack vector for MITM. id: CVE-2021-38751 info: name: ExponentCMS = 2.6 - Host Header Injection author:...

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: root@kitploit: python code.py file.php -this will sc...

CVE-2026-33149-PoC

CVE-2026-33149 — Injection d'en-tête Host dans Tandoor Recipes Résumé Tandoor Recipes définit ALLOWEDHOSTS = '' par défaut dans settings.py, ce qui amène Django à accepter n'importe quelle valeur dans l'en-tête HTTP sans validation. L'application utilise pour générer des URL absolues dans plusieu...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Внедрение заголовка Host, приводящее к обходу аутентификации SAML в AWS Auth Manager Apache Airflow Злоумышленник может внедрить вредоносный заголовок Host в поток входа SAML, в результате чего URL службы Assertion Consumer Service ACS будет указывать на сервер, контролируемый...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898: Xiaomi Mi Router 4A Gigabit - SSRF через инъекцию заголовка Host -orange Краткое описание Уязвимость подделки серверного запроса SSRF существует в маршрутизаторе Xiaomi Mi Router 4A Gigabit Edition. Веб-интерфейс маршрутизатора не проверяет HTTP-заголовок Host, что позволяет...

CVE-2026-56709

Grav before 3.9.2 is vulnerable to a Host header injection in the sendInvitationEmail() function. When constructing token-bearing invitation links, the unvalidated Host header allows an attacker to poison the link and redirect users to an attacker-controlled domain . This bypasses the require_tru...

CVE-2026-56709 Grav before 3.9.2 Host Header Injection via sendInvitationEmail

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

EUVD-2026-65207

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

Impact Pipelines-as-Code installations using the GitHub App provider are vulnerable to GitHub App credential exfiltration through the webhook endpoint. Affected versions accepted the X-GitHub-Enterprise-Host request header as the GitHub Enterprise API host during GitHub App token generation. For...

CVE-2026-15689

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in defaultemailpasswordreset and defaultwelcomesend. Both default emails emit a link of the form $base/login/$code, whose authority comes from the request Host header,...

CVE-2026-15689 Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in defaultemailpasswordreset and defaultwelcomesend. Both default emails emit a link of the form $base/login/$code, whose authority comes from the request Host header,...

CVE-2026-15689

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in defaultemailpasswordreset and defaultwelcomesend. Both default emails emit a link of the form $base/login/$code, whose authority comes from the request Host header,...

PT-2026-73031

Name of the Vulnerable Software and Affected Versions Dancer2::Plugin::Auth::Extensible versions prior to 0.714 Description Password reset link poisoning is possible via the request Host header in the default email password reset and default welcome send functions. Both default emails generate a...