PT-2022-16744

Name of the Vulnerable Software and Affected Versions waline version 1.6.1 Description The issue allows an attacker to submit messages using the X-Forwarded-For header to forge any IP address. Recommendations For waline version 1.6.1, consider restricting the use of the X-Forwarded-For header unt...

CVE-2022-24594: Missing Authorization

In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address...

Google Chrome Omnibox Spoofing Vulnerability (CNVD-2018-20140)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 63.0.3239.84, which stems from insufficient policy enforcement. The vulnerability can be exploited by remote attacker...

Google Chrome Omnibox Spoofing Vulnerability (CNVD-2018-20141)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 63.0.3239.84, which stems from insufficient policy enforcement. The vulnerability can be exploited by remote attacker...

Mozilla Firefox Forgery Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A forgery vulnerability exists in versions prior to Mozilla Firefox 58. An attacker can exploit this vulnerability to forge URLs and conduct phishing attacks...

Mozilla Thunderbird Address Forgery Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation developed from the Mozilla Application Suite independent of the e-mail client software, support for IMAP, POP mail protocol and HTML mail format. An address forgery vulnerability exists in versions of Mozilla Thunderbird prior to 52.5.2...

Google Chrome Address Forgery Vulnerability

Google Chrome is a popular web browser. An address forgery vulnerability exists in Google Chrome Omnibox, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and can be used in spoofing attacks...

Google Chrome Omnibox Address Forgery Vulnerability (CNVD-2017-02098)

Google Chrome is a popular web browser. An address forgery vulnerability exists in Google Chrome Omnibox, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and can deceive users...

Google Chrome Omnibox Address Forgery Vulnerability

Google Chrome is a popular web browser. An address forgery vulnerability exists in Google Chrome Omnibox, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing...

Google Chrome Omnibox Address Spoofing Vulnerability (CNVD-2016-12113)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit the vulnerability to forge address information...

Dotclear Password Reset Address Forgery Vulnerability

Dotclear is an open source free web publishing software. Dotclear suffers from a password reset address forgery vulnerability that can be exploited by an attacker to forge the hostname of a password reset address...

Google Chrome URL Forgery Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the 'CustomButton::AcceleratorPressed' function in the ui/views/controls/button/custombutton.cc file in Google Chrome versions prior to 48.0.2564.82. ' function in the...

Apache HTTP Server 'mod_remoteip.c' IP Address Forgery Vulnerability

Apache HTTP Server is a popular WEB service program. Apache HTTP Server 'modremoteip.c' has an IP address forgery vulnerability that allows attackers to exploit the vulnerability to bypass security restrictions and conduct attacks such as spoofing...