Write-ups
Check The Published Writeups
| WDB | Title | Tags | Programs | Authors | Type | Publication | Added |
|---|---|---|---|---|---|---|---|
| 4162 | ESI Injection Part 2: Abusing specific implementations | ESI injection RCE SSRF HTTP header injection | NA | Philippe Arteau (@h3xstream) | Bug Bounty | 2019-05-02 | 2023-06-13 |
| 3140 | Fun with Header and Forget Password | HTTP header injection | NA | Vuk Ivanovic | Bug Bounty | 2020-09-22 | 2023-06-13 |
| 3045 | Chaining password reset link poisoning, IDOR, and information leakage to achieve account takeover at api.redacted.com | HTTP header injection | NA | Jadek Mark (@mase289) | Bug Bounty | 2020-11-10 | 2023-06-13 |
| 2037 | HTTP Header Injection In Citrix ADC And Citrix Gateway (CVE-2020-8300, CVE-2021-22927) | Host header injection XSS | Citrix Systems | Wolfgang Ettlinger | Bug Bounty | 2021-11-30 | 2023-06-13 |
| 1048 | Making HTTP header injection critical via response queue poisoning | HTTP header injection HTTP request smuggling | NA | James Kettle (@albinowax) | Bug Bounty | 2022-09-22 | 2023-06-13 |