https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:46:49 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-01850 bdu:2025-01850 https://cve.radiocsirt.org/vuln/bdu:2025-01850 https://cve.radiocsirt.org/vuln/euvd-2026-252901 EUVD-2026-252901 https://cve.radiocsirt.org/vuln/euvd-2026-252901 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55925 <p>In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual destination, an attacker can forge a value to gain unauthorized access. This exploit targets improper host validation, potentially exposing sensitive API endpoints.</p> <p>In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual destination, an attacker can forge a value to gain unauthorized access. This exploit targets improper host validation, potentially exposing sensitive API endpoints.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-55925 https://cve.radiocsirt.org/vuln/ghsa-54pf-9qmv-m7pj <p>API Security bypass through header manipulation</p> <p>API Security bypass through header manipulation</p> https://cve.radiocsirt.org/vuln/ghsa-54pf-9qmv-m7pj