HTTP Host Header Attacks 4 Routing-based SSRF Apr 4, 2026 Web cache poisoning via ambiguous requests Apr 3, 2026 Host header authentication bypass Apr 2, 2026 Basic password reset poisoning Apr 1, 2026