https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html

[mex]

General Question:

would it make sense to check the HOST-Header for a ^[a-z0-9-]\.[a-z]$ pattern
to prevent any attacks in such style?

is there any case where a HOST-header would differ from any of given
pattern above?


we could the have a generic sig that would protect from any
HOST-header based attacks

[mex]

i'd propose the following: rx:^[a-zA-Z\d-]+\.[a-zA-Z]+$


comments?