Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/21 3:16 p.m.•14 views

CVE-2026-77087

Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...

9.6CVSS0.00486EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/21 3:03 p.m.•16 views

EUVD-2026-63991

Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...

9.6CVSS5.8AI score0.00486EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/21 3:03 p.m.•18 views

CVE-2026-77087 Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding

Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...

9.6CVSS6.5AI score0.00486EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/21 3:03 p.m.•46 views

CVE-2026-77087 Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding

Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...

9.6CVSS0.00486EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/21 3:03 p.m.•44 views

CVE-2026-77087

Paperclip before 0.3.1 running in its default local_trusted mode fails to validate Host headers , enabling DNS rebinding attacks. An attacker can craft a malicious webpage that, when visited by a developer with Paperclip running locally, makes authenticated API requests and executes arbitrary com...

9.6CVSS6.5AI score0.00486EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•1 views

CVE-2026-77087: Missing Authorization

Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...

9.6CVSS6.3AI score0.00486EPSS
SaveExploits0References2
Rows per page
Query Builder