Lucene search
+L

952 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/26 3:1 p.m.9 views

CVE-2026-43935

e107 is a content management system CMS. Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset links pointing to attacker-controlled domains. This can lead to phishing attacks, account takeover, o...

8.1CVSS5.8AI score0.00297EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/05/26 3:1 p.m.28 views

CVE-2026-43935

CVE-2026-43935 affects the e107 content management system. Before version 2.3.4, a Host Header Injection in the password reset page allows an attacker to manipulate the Host header to generate password reset links that point to attacker-controlled domains, enabling phishing and potential account ...

8.1CVSS5.8AI score0.00297EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/26 3:1 p.m.5 views

CVE-2026-43935 e107: Host Header Injection in e107 password reset enables phishing

e107 is a content management system CMS. Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset links pointing to attacker-controlled domains. This can lead to phishing attacks, account takeover, o...

8.1CVSS6AI score0.00297EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/05/26 3:1 p.m.12 views

EUVD-2026-31850

e107 is a content management system CMS. Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset links pointing to attacker-controlled domains. This can lead to phishing attacks, account takeover, o...

8.1CVSS5.8AI score0.00297EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.20 views

PT-2026-43267

e107 is a content management system CMS. Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset links pointing to attacker-controlled domains. This can lead to phishing attacks, account takeover, o...

8.1CVSS5.8AI score0.00297EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/04 7:15 a.m.13 views

CVE-2026-29199

phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When forceservervars is disabled, the servers hostname may be extracted from the HTTP Host header which is used to generate the password reset link URL. An attacker who can manipulate the Hos...

8.1CVSS0.00249EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/04 5:42 a.m.7 views

EUVD-2026-26892

phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When forceservervars is disabled, the servers hostname may be extracted from the HTTP Host header which is used to generate the password reset link URL. An attacker who can manipulate the Hos...

8.1CVSS5.8AI score0.00249EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/04 5:42 a.m.8 views

CVE-2026-29199

phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When forceservervars is disabled, the servers hostname may be extracted from the HTTP Host header which is used to generate the password reset link URL. An attacker who can manipulate the Hos...

5.8AI score0.00249EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/05/04 5:42 a.m.2 views

CVE-2026-29199

phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When forceservervars is disabled, the servers hostname may be extracted from the HTTP Host header which is used to generate the password reset link URL. An attacker who can manipulate the Hos...

8.1CVSS5.9AI score0.00249EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/04 5:42 a.m.51 views

CVE-2026-29199

CVE-2026-29199 affects phpBB prior to 3.3.16. The issue is a Host Header Injection in which, when force_server_vars is disabled, the server hostname is sourced from the HTTP Host header to build the password reset URL. An attacker who can control or influence the Host header can cause password re...

8.1CVSS5.8AI score0.00249EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/04 5:42 a.m.51 views

CVE-2026-29199

phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When forceservervars is disabled, the servers hostname may be extracted from the HTTP Host header which is used to generate the password reset link URL. An attacker who can manipulate the Hos...

0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.13 views

PT-2026-36770

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.3.16 Description Host Header Injection occurs when force server vars is disabled, allowing the server's hostname to be extracted from the HTTP Host header to generate password reset link URLs. An attacker capable of...

8.1CVSS5.8AI score0.00249EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/04 12:0 a.m.10 views

phpBB 授权问题漏洞

phpBB is a set of web forum software developed by Ariefibis. Versions prior to phpBB 3.3.16 had authorization-related vulnerabilities. This vulnerability stemmed from host header injection, which could lead to malicious password reset links. When forceservervars is disabled, the server’s hostname...

8.1CVSS5.8AI score0.00249EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/04/22 1:22 a.m.139 views

Exploit for Origin Validation Error in Apache Airflow_Providers_Amazon

CVE-2026-25604 PoC Host Header Injection leading to SAML au...

5.4CVSS5.8AI score0.00359EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/04/14 11:35 p.m.21 views

CVE-2026-39971 Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOST

Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the email sending functionality in include/functions.inc.php inserts $SERVER'HTTPHOST' directly into the Message-ID SMTP header without validation, and the existing sanitization function serendipityisResponseClean is not...

7.2CVSS0.00255EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/14 11:35 p.m.6 views

CVE-2026-39971 Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOST

Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the email sending functionality in include/functions.inc.php inserts $SERVER'HTTPHOST' directly into the Message-ID SMTP header without validation, and the existing sanitization function serendipityisResponseClean is not...

7.2CVSS5.9AI score0.00255EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/04/14 10:32 p.m.5 views

EUVD-2026-22811

Serendipity has a Host Header Injection allows SMTP header injection via unvalidated HTTPHOST in Message-ID email header...

7.2CVSS5.8AI score0.00255EPSS
SaveExploits1References2
OSV
OSV
added 2026/04/14 10:32 p.m.5 views

GHSA-458G-Q4FH-MJ6R Serendipity has a Host Header Injection allows SMTP header injection via unvalidated HTTP_HOST in Message-ID email header

Summary Serendipity inserts $SERVER'HTTPHOST' directly into the Message-ID SMTP header without any validation beyond CRLF stripping. An attacker who can control the Host header during an email-triggering action can inject arbitrary SMTP headers into outgoing emails, enabling spam relay, BCC...

7.2CVSS5.9AI score0.00255EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/04/14 10:32 p.m.7 views

Serendipity has a Host Header Injection allows SMTP header injection via unvalidated HTTP_HOST in Message-ID email header

Summary Serendipity inserts $SERVER'HTTPHOST' directly into the Message-ID SMTP header without any validation beyond CRLF stripping. An attacker who can control the Host header during an email-triggering action can inject arbitrary SMTP headers into outgoing emails, enabling spam relay, BCC...

7.2CVSS5.9AI score0.00255EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2026/04/14 10:32 p.m.5 views

EUVD-2026-22809

Serendipity has a Host Header Injection allows authentication cookie scoping to attacker-controlled domain in functionsconfig.inc.php...

6.9CVSS5.8AI score0.00224EPSS
SaveExploits1References2
Rows per page
Query Builder