Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/11/30 1:4 a.m.4 views

CVE-2025-13434

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

7.5CVSS6AI score0.0013EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/20 3:30 p.m.1 views

EUVD-2025-198257

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

6.9CVSS5.7AI score0.0013EPSS
Exploits1References5
NVD
NVD
added 2025/11/20 3:17 p.m.3 views

CVE-2025-13434

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

7.5CVSS0.0013EPSS
Exploits1References4
OSV
OSV
added 2025/11/20 3:17 p.m.1 views

CVE-2025-13434

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

7.5CVSS5.5AI score0.0013EPSS
Exploits1References4
CVE
CVE
added 2025/11/20 1:2 a.m.10 views

CVE-2025-13434

CVE-2025-13434 affects the jameschz Hush Framework 2.0. The issue lies in the HTTP Host Header Handler implemented in Hush\hush-lib\hush\Util.php, where manipulation of the argument $_SERVER['HOST'] causes improper neutralization of HTTP headers for scripting syntax. Exploitation is described as ...

7.5CVSS5AI score0.0013EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/11/20 1:2 a.m.7 views

CVE-2025-13434 jameschz Hush Framework HTTP Host Header Util.php http headers for scripting syntax

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

6.9CVSS0.0013EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/11/20 1:2 a.m.3 views

CVE-2025-13434 jameschz Hush Framework HTTP Host Header Util.php http headers for scripting syntax

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

6.9CVSS5AI score0.0013EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/11/20 12:0 a.m.3 views

PT-2025-47545

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hushhush-libhushUtil.php of the component HTTP Host Header Handler. This manipulation of the argument $ SERVER'HOST' causes improper neutralization of http headers for scripting...

6.9CVSS6.1AI score0.0013EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.2 views

Hush Framework 安全漏洞

Hush Framework is a web application framework by the individual developer of james.huang. A security vulnerability exists in Hush Framework version 2.0, which stems from improperly neutralized HTTP host headers and could lead to remote attacks...

7.5CVSS5.5AI score0.0013EPSS
Exploits1References5
Rows per page
Query Builder