5051 matches found
CraftMyCMS security vulnerabilities
CraftMyCMS is a content management system by Kévin GUIOT Individual Developer. A security vulnerability exists in CraftMyCMS version 4.0.2, which stems from the password reset feature constructing a reset link directly using the HTTPHOST header, which could lead to a phishing attack or account...
Webmin security vulnerabilities
Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 2.510, which stems from an unvalidated HTTP Host header in the password reset function, which could allow an attacker to...
Drawing-Captcha APP: Input verification error vulnerability
Drawing-Captcha APP is a captcha application from Drawing Captcha open source. An input validation error vulnerability exists in Drawing-Captcha APP that stems from the presence of host header injection in the /register and /confirm-email endpoints, which could result in users being redirected to...
CVE-2025-61536
FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset magic links using the untrusted req.headers.host header and forces the http:// scheme. An attacker who can control the Host header or exploit a misconfigured proxy/load-balancer that forwards the header unchanged can cause reset lin...
CVE-2025-61543
A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. The system uses $SERVER'HTTPHOST' directly to construct password reset links sent via email. An attacker can manipulate the Host header to send malicious reset links, enabling phishing attacks ...
CVE-2025-61541
The Webmin hosting control panel (version 2.510 ) is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi ). The root cause is an unvalidated HTTP Host header used by the get_webmin_email_url() function to construct reset links. An attacker can manipulate thi...
CVE-2025-61536
FelixRiddle dev-jobs-handlebars 1.0 is vulnerable to an unverified password change issue because it generates absolute password-reset (magic) links using the untrusted req.headers.host header while forcing the http:// scheme. An attacker capable of controlling the Host header—or exploiting a misc...
CVE-2025-61536: Unverified Password Change
FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset magic links using the untrusted req.headers.host header and forces the http:// scheme. An attacker who can control the Host header or exploit a misconfigured proxy/load-balancer that forwards the header unchanged can cause reset lin...
PT-2025-42474
Name of the Vulnerable Software and Affected Versions FelixRiddle dev-jobs-handlebars version 1.0 Description The software uses absolute password-reset links that rely on the untrusted req.headers.host header and enforces the http:// scheme. This allows an attacker who can control the Host header...
CVE-2025-22381
The TID-Lab/aggie open-source project, specifically version 2.6.1 and earlier, is vulnerable to a Host Header injection in the forgot password functionality. The root cause is located in the lib/api/reset-password.js file, where the sendEmail helper function uses the attacker-controlled req.heade...
CVE-2025-61536
FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset magic links using the untrusted req.headers.host header and forces the http:// scheme. An attacker who can control the Host header or exploit a misconfigured proxy/load-balancer that forwards the header unchanged can cause reset lin...
PT-2025-42471
Name of the Vulnerable Software and Affected Versions Aggie version 2.6.1 Description A Host Header injection flaw exists in the forgot password functionality of the software. This allows an attacker to reset a user's password. The vulnerability is present in the handling of the Host header durin...
PT-2025-42478
Name of the Vulnerable Software and Affected Versions CraftMyCMS version 4.0.2.2 Description A Host Header Injection issue exists in the password reset functionality. The system directly uses $ SERVER'HTTP HOST' to create password reset links sent through email. An attacker can manipulate the Hos...
Dev jobs handlebars security vulnerabilities
Dev jobs handlebars is a job search program by Felix Individual Developers. A security vulnerability exists in Dev jobs handlebars version 1.0 that stems from the use of an untrusted req.headers.host header to generate an absolute password reset link and force the use of an http scheme, which cou...
CVE-2025-61541: Improper Access Control
Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality forgotsend.cgi. The reset link sent to users is constructed using the HTTP Host header via getwebminemailurl. An attacker can manipulate the Host header to inject a malicious domain into the reset email. If ...
CVE-2025-61543
A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. The system uses $SERVER'HTTPHOST' directly to construct password reset links sent via email. An attacker can manipulate the Host header to send malicious reset links, enabling phishing attacks ...
PT-2025-42541
Name of the Vulnerable Software and Affected Versions Drawing-Captcha APP versions prior to 1.2.5-alpha-patch Description Drawing-Captcha APP is susceptible to a Host Header Injection affecting the /register and /confirm-email API endpoints. An attacker can manipulate the Host header in HTTP...
CVE-2025-61541
Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality forgotsend.cgi. The reset link sent to users is constructed using the HTTP Host header via getwebminemailurl. An attacker can manipulate the Host header to inject a malicious domain into the reset email. If ...
arkadiyt-projects: DNS Rebinding Attack
Hi, there is a DNS rebinding vulnerability in your SSRF filter. F4891755 You validate the hostname's IP address, but then pass the hostname to Net::HTTP.start, which does its own DNS lookup. An attacker can control a DNS server that returns a safe public IP during validation, then returns 127.0.0...
