https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T19:05:33.851638+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-187294 EUVD-2026-187294 2026-10-15T19:05:33.914365+00:00 EUVD-2026-187294 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38877 fkie_cve-2023-38877 2026-10-15T19:05:33.914409+00:00

A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which, once clicked, lead to an attacker-controlled server and thus leak the password reset token. This allows an attacker to reset other users' passwords.

 https://cve.radiocsirt.org/vuln/ghsa-hqp9-mrjw-7qq2 GHSA-hqp9-mrjw-7qq2 — Economizzer host header injection vulnerability 2026-10-15T19:05:33.914457+00:00

Affected: Packagist: gugoan/economizzer

A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which, once clicked, lead to an attacker-controlled server and thus leak the password reset token. This allows an attacker to reset other users' passwords.

 https://cve.radiocsirt.org/vuln/gsd-2023-38877 gsd-2023-38877 2026-10-15T19:05:33.914498+00:00 gsd-2023-38877