Description
LinuxServer.io 发布的 Heimdall 2.6.3-ls307 版本存在重定向漏洞，攻击者将用户从可信Heimdall实例跳转至钓鱼、恶意站点。
Heimdall存在重定向漏洞(CVE-2025-50578)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-50578
https://github.com/linuxserver/Heimdall/issues/1451
https://medium.com/@juanfelipeoz.rar/cve-2025-50578-exploiting-host-header-injection-open-redirect-in-heimdall-application-733afceff2ea
https://avd.aliyun.com/detail?id=AVD-2025-50578
https://www.ddpoc.com/DVB-2026-11038.html
https://access.redhat.com/security/cve/cve-2025-50578
https://www.sentinelone.com/vulnerability-database/cve-2025-50578/
https://osv.dev/vulnerability/CVE-2025-50578