Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:13:33 +0000 bdu:2022-03415 https://cve.radiocsirt.org/vuln/bdu:2022-03415 bdu:2022-03415 https://cve.radiocsirt.org/vuln/bdu:2022-03415 EUVD-2026-174508 https://cve.radiocsirt.org/vuln/euvd-2026-174508 EUVD-2026-174508 https://cve.radiocsirt.org/vuln/euvd-2026-174508 fkie_cve-2022-23064 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23064 <p>In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This leads to account take over.</p> <p>In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This leads to account take over.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23064 GHSA-9vh6-qfv6-vcqp — snipe-IT vulnerable to host header injection https://cve.radiocsirt.org/vuln/ghsa-9vh6-qfv6-vcqp <p><strong>Affected:</strong> Packagist: snipe/snipe-it</p> <p>Snipe-IT is a free, open-source IT asset/license management systemIn Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This can lead to account take over.</p> <p><strong>Affected:</strong> Packagist: snipe/snipe-it</p> <p>Snipe-IT is a free, open-source IT asset/license management systemIn Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This can lead to account take over.</p> https://cve.radiocsirt.org/vuln/ghsa-9vh6-qfv6-vcqp gsd-2022-23064 https://cve.radiocsirt.org/vuln/gsd-2022-23064 gsd-2022-23064 https://cve.radiocsirt.org/vuln/gsd-2022-23064