https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:46:13.928471+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03415 bdu:2022-03415 2026-10-04T05:46:14.014129+00:00 bdu:2022-03415 https://cve.radiocsirt.org/vuln/euvd-2026-174508 EUVD-2026-174508 2026-10-04T05:46:14.014167+00:00 EUVD-2026-174508 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23064 fkie_cve-2022-23064 2026-10-04T05:46:14.014181+00:00

In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This leads to account take over.

 https://cve.radiocsirt.org/vuln/ghsa-9vh6-qfv6-vcqp GHSA-9vh6-qfv6-vcqp — snipe-IT vulnerable to host header injection 2026-10-04T05:46:14.014212+00:00

Affected: Packagist: snipe/snipe-it

Snipe-IT is a free, open-source IT asset/license management systemIn Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This can lead to account take over.

 https://cve.radiocsirt.org/vuln/gsd-2022-23064 gsd-2022-23064 2026-10-04T05:46:14.014238+00:00 gsd-2022-23064