BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions.
- https://support.bluestacks.com/hc/en-us/articles/360021469391-Release-Notes
No PoCs found on GitHub currently.