Tag

Dns-Rebinding

2 briefs RSS

rmcp Streamable HTTP Server Transport DNS Rebinding Vulnerability

The `rmcp` crate before v1.4.0 is vulnerable to DNS rebinding attacks via the Streamable HTTP server transport due to missing Host header validation, potentially allowing arbitrary code execution on a victim's machine if they visit a malicious website.

rmcp dns-rebinding vulnerability http attack

2r 1t May 7, 2026

high advisory

AVideo SSRF Vulnerability via HTTP Redirect and DNS Rebinding

2 rules 1 IOC

AVideo is vulnerable to Server-Side Request Forgery (SSRF) due to improper validation of user-supplied URLs that does not prevent HTTP redirects, and DNS rebinding due to discarded resolved IP addresses.

aVideo ssrf dns-rebinding

2r 1i Jan 3, 2024