952 matches found
CVE-2018-25016
Greenbone Security Assistant GSA before 7.0.3 and Greenbone OS GOS before 5.0.0 allow Host Header Injection...
Greenbone Security Assistant 注入漏洞
Greenbone Security Assistant GSA is a web interface.Greenbone Security Assistant is a web interface developed for the Greenbone Security Manager appliance. A security vulnerability exists in Greenbone Security Assistant GSA versions prior to 7.0.3 and Greenbone OS GOS versions prior to 5.0.0 that...
Php_Code_Analysis - San your PHP code for vulnerabilities
This script willscan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: python code.py this will scan one file python code.py...
Dell iDRAC8 Host Header Injection Vulnerability
The Dell iDRAC8 is an integrated Dell Remote Access Controller that helps IT administrators deploy, update, monitor and maintain servers without installing any additional software. A host header injection vulnerability exists in Dell iDRAC8 versions prior to 2.75.100.75. A remote, unauthenticated...
CVE-2021-21510
Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections...
CVE-2021-21510
Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections...
CVE-2021-21510
Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections...
Dell iDRAC8 注入漏洞
The Dell iDRAC8 is an integrated Dell Remote Access Controller that helps IT administrators deploy, update, monitor and maintain servers without installing any additional software. A host header injection vulnerability exists in Dell iDRAC8 versions prior to 2.75.100.75. A remote, unauthenticated...
CVE-2021-27404
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...
Fastweb Askey RTV1907VW Input Validation Error Vulnerability
The Fastweb Askey RTV1907VW is a router from Fastweb Italy. An input validation error vulnerability exists in the Askey RTF8115VW. The vulnerability stems from an allowed injection in the Host HTTP header of a web service. The following products and versions are affected: Askey RTF8115VW...
CVE-2020-5019
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...
CVE-2020-5019
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...
Logitech: Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofing
Hello team I hope it will be a happy year for you and for me 😇 Summary: I found Host Header injection in oslo.io I tried to use it to show the security effect on users And I found this Steps To Reproduce: 1. Well, first of all, enter your project 2.Make an invitation by email 3.Now through the...
Thingsboard Injection Vulnerability
Thingsboard is a Java-based platform for monitoring, management, and data collection of IOT devices from the Thingsboard team. A security vulnerability exists in versions prior to ThingsBoard v3.2 that stems from the injection of host headers in password reset emails. This allowed an attacker to...
Spiceworks 7.5 HTTP Header Injection
Exploit Title: Spiceworks 7.5 - HTTP Header Injection Google Dork: inurl:/prousers/login Discovered Date: 15/09/2020 Exploit Author: Ramikan Vendor Homepage: https://www.spiceworks.com Affected Version: 7.5.7.0 may be others. Tested On Version: 7.5.7.0 CVE : CVE-2020-25901 Vulnerability: Host...
CVE-2020-27687
ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...
CVE-2020-27687
ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. The root cause is lack of validation of the Host header, enabling an attacker to embed a malicious link in a password-reset email that points to an attacker-controlled server. Impact per sources is high confi...
CVE-2020-25901
Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages...
