Code injection

Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections...

CVE-2019-13680

Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections...

CVE-2019-13680

Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections...

PT-2019-7425

Name of the Vulnerable Software and Affected Versions wti-like-post plugin versions prior to 1.4.3 Description The issue concerns SQL injection via the HTTP CLIENT IP, HTTP X FORWARDED FOR, HTTP X FORWARDED, HTTP FORWARDED FOR, or HTTP FORWARDED variable in the WtiLikePostProcessVote function...

CVE-2019-17240

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers...

CVE-2019-17240: Improper Restriction of Excessive Authentication Attempts

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers...

PT-2019-15027

Name of the Vulnerable Software and Affected Versions Bludit versions 3.2.9 through 3.9.2 Description The issue allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers. This can be exploited by sending requests with...

Citrix Director showing the client IP address as 0.0.0.0 for users connecting from HTML5 receiver.

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Please consider below scenario: The user connects to a Published desktop or to a Published application v...

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an arbitrary server, which would reveal the IP address of clients requesting the file from that server...

Low: Red Hat Security Advisory: kde-workspace security and bug fix update

An update for kde-workspace, kde-settings, kdelibs, kmag, and virtuoso-opensource is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2018-19510

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header...

CVE-2018-19510

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header...

Sql injection

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header...

CVE-2018-19510

Webgalamb is affected by CVE-2018-19510 where subscriber.php (Webgalamb up to version 7.0) is vulnerable to SQL injection via the Client-IP HTTP header. The issue originates from insufficient validation of externally supplied SQL statements in the database layer, enabling an attacker to influence...

PT-2019-9842

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0 Description The issue allows for SQL injection via the Client-IP HTTP request header in the subscriber.php file. Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue...

CVE-2018-19510: Improper Neutralization of Special Elements used in an SQL Command

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header...

Sql injection

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

CVE-2018-17136

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

CVE-2018-17136

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

CVE-2018-17136

CVE-2018-17136 affects ZZCMS v8.3, with a SQL Injection in /user/check.php exploitable via the Client-Ip HTTP header. Root cause is improper handling of the header leading to SQL command injection. Exploitation details are not provided beyond the architectural description; CVSS metrics indicate a...