Categoría: HTTP Host header attacks

Web cache poisoning via ambiguous requests

Host validation bypass via connection state attack

SSRF via flawed request parsing

Routing-based SSRF

Host header authentication bypass

Basic password reset poisoning