Lucene search
+L

1379 matches found

OSV
OSV
added 2025/10/16 12:00 a.m.12 views

CVE-2025-61541

Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality forgotsend.cgi. The reset link sent to users is constructed using the HTTP Host header via getwebminemailurl. An attacker can manipulate the Host header to inject a malicious domain into the reset email. If ...

7.1CVSS7.5AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/10/16 12:00 a.m.3 views

CVE-2025-61541

Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality forgotsend.cgi. The reset link sent to users is constructed using the HTTP Host header via getwebminemailurl. An attacker can manipulate the Host header to inject a malicious domain into the reset email. If ...

7AI score0.00429EPSS
SaveExploits1References3
CVE
CVE
added 2025/10/16 12:00 a.m.50 views

CVE-2025-61541

Webmin 2.510 is affected by CVE-2025-61541 due to a Host Header Injection in forgot_send.cgi. The reset link is constructed using the HTTP Host header via get_webmin_email_url(), allowing an attacker to inject a malicious domain into the password reset email. If a victim clicks the poisoned link,...

7.1CVSS7AI score0.00429EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.7 views

Webmin 安全漏洞

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 2.510, which stems from an unvalidated HTTP Host header in the password reset function, which could allow an attacker to...

7.1CVSS6.7AI score0.00429EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2025/10/11 9:02 p.m.70 views

PoC_Webmin

...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/10/11 12:00 a.m.11 views

PT-2025-42477

Name of the Vulnerable Software and Affected Versions Webmin version 2.510 Description Webmin version 2.510 has a flaw in the password reset functionality forgot send.cgi. The reset link sent to users is created using the HTTP Host header through the get webmin email url function. An attacker can...

8.5CVSS6.6AI score0.00429EPSS
SaveExploits1References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2009-4424

Malware in sbrugna...

7.5CVSS6.4AI score0.0165EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2007-1273

Malware in sbrugna...

4.3CVSS6.4AI score0.00617EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2005-1180

Malware in sbrugna...

10CVSS6.4AI score0.01776EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2001-1055

Malware in sbrugna...

7.2CVSS6.4AI score0.00514EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2001-1177

Malware in sbrugna...

10CVSS6.4AI score0.09778EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2015-2124

Malware in sbrugna...

9CVSS6.4AI score0.02207EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-19016

Malware in sbrugna...

6.1CVSS6.1AI score0.02001EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-23425

Malware in sbrugna...

9.8CVSS9.2AI score0.0173EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2006-4530

Malware in sbrugna...

6.8CVSS6.1AI score0.03156EPSS
SaveExploits0References18
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2002-2338

Malware in sbrugna...

9.3CVSS6.4AI score0.03642EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2018-20323

Malware in sbrugna...

9.8CVSS9.3AI score0.01828EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2007-5047

Malware in sbrugna...

9CVSS6.4AI score0.02445EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-4966

Malware in sbrugna...

6.1CVSS6.2AI score0.00685EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-29666

Malware in sbrugna...

5.4CVSS5.5AI score0.0057EPSS
SaveExploits0References3
Rows per page
Query Builder