https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 26 Jun 2026 05:03:58 +0000 https://vulnerability.circl.lu/sighting/8e6abf6b-5374-470e-9132-196a8d46038f/export {"uuid": "8e6abf6b-5374-470e-9132-196a8d46038f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38877", "type": "seen", "source": "https://t.me/cibsecurity/71169", "content": "\u203c CVE-2023-38877 \u203c\n\nA host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which, once clicked, lead to an attacker-controlled server and thus leak the password reset token. This allows an attacker to reset other users' passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-28T07:46:41.000000Z"} {"uuid": "8e6abf6b-5374-470e-9132-196a8d46038f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38877", "type": "seen", "source": "https://t.me/cibsecurity/71169", "content": "\u203c CVE-2023-38877 \u203c\n\nA host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which, once clicked, lead to an attacker-controlled server and thus leak the password reset token. This allows an attacker to reset other users' passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-28T07:46:41.000000Z"} https://vulnerability.circl.lu/sighting/8e6abf6b-5374-470e-9132-196a8d46038f/export Thu, 28 Sep 2023 07:46:41 +0000