593 matches found
CVE-2025-63468
The TOTOLINK LR350 wireless router (specifically version v9.3.5u.6369_B20220309 ) is vulnerable to a stack-based buffer overflow in the sub_426EF8 function. The root cause is the failure of the http_host parameter to correctly validate the length and size of the input data. An attacker can exploi...
CVE-2025-1680: Acceptance of Extraneous Untrusted Data With Trusted Data
An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header into HTTP requests sent to an affected...
CVE-2025-61543
A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. The system uses $SERVER'HTTPHOST' directly to construct password reset links sent via email. An attacker can manipulate the Host header to send malicious reset links, enabling phishing attacks ...
CVE-2025-52647 HCL BigFix WebUI is affected by a host header poisoning vulnerability
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks...
EUVD-2008-3480
Malware in sbrugna...
EUVD-2009-0801
Malware in sbrugna...
EUVD-2009-1831
Malware in sbrugna...
EUVD-2002-0527
Malware in sbrugna...
EUVD-2021-0864
Malware in sbrugna...
EUVD-2009-0802
Malware in sbrugna...
EUVD-2009-2055
Malware in sbrugna...
EUVD-2021-12090
Malware in sbrugna...
EUVD-2009-0173
Malware in sbrugna...
EUVD-2016-8813
Malware in sbrugna...
EUVD-2016-0007
Malware in sbrugna...
EUVD-2016-3858
Malware in sbrugna...
EUVD-2009-2056
Malware in sbrugna...
EUVD-2003-1029
Malware in sbrugna...