ivantiunlocker

ivantiunlocker Prevent CVE-2025-22457 and other security problems with Juniper/Ivanti Secure Connect SSL VPN Many security issues around SSL VPN devices recently. You can't feel safe anymore. And then there is CVE-2025-22457 ! Read the story behind it :...

CVE-2024-41276

CVE-2024-41276 Kaiten Authentication Bypass Kaiten - a workflow management system. A vulnerability in Kaiten allows attackers to bypass the PIN code authentication mechanism. The application requires users to input a 6-digit PIN code sent to their email for authorization after entering their logi...

transfer.sh

SECURITY WARNING IP filter and HTTP auth bypass via unauthenticated X-Forwarded-For header spoofing transfer.sh...

CVE-2023-38408

Reference / info https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt...

fockcache

fockcache FockCache - Test d'empoisonnement de cache minimalisé Détails sur l'empoisonnement de cache : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tente de provoquer un empoisonnement de cache en essayant les en-têtes X-Forwarded-Host et X-Forwarded-Scheme...

CVE-2022-24181

CVE-2022-24181 and CVE-2022-26616. both are probably same Open-journal-system-Vulnerability XSS via Host Header injection and Steal Password Reset Token of another user Step to reproduce: 1. Go to this site: https://who's-using-ojs-software.com 2. And capture this request in burp , and send to...

CVE-2019-19633

CVE-2019-19633 lib/G/functions.php in Chevereto 1.0.0 through 1.1.4 Free, and through 3.13.5 Core, allows an attacker to perform bruteforce attacks without triggering the implemented protection mechanism by manipulating the X-Forwarded-For header in the request. The IP in the header has to be...

requests-ip-rotator

Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries — improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...

CVE-2023-27100

CVE-2023-27100 - pfSense Anti-brute force protection bypass Problem Description The authentication system attempts to be informative and print extra information along with IP addresses to completely identify where a user logs in from when they login using the GUI. This includes the authentication...

CVE-2023-4631

CVE ID : CVE-2023-4631 Vulnerability Type : IP Address Spoofing Description : The DoLogin Security plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 3.6. This is due to insufficient restrictions on where the IP Address information is being retrieved for...

CVE-2015-3224

Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...

CVE-2022-46169

Cacti remoteagent.php Remote Command Execution Vulnerability CVE-2022-46169 Vulnerability Description Cacti is a server monitoring and management platform. A command injection vulnerability exists in versions 1.2.17 to 1.2.22. An attacker can bypass server-side validation via the X-Forwarded-For...

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS Authentication bypass Mass exploitation /api/v2/cmdb/system/admin/ "ssh-public-key1": "" root@kitploit: ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H 'Forwarded:...

CVE-2023-4549

CVE ID : CVE-2023-4549 Vulnerability Type : Cross-Site Scripting Description : The DoLogin Security plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including, 3.6 due to insufficient input sanitization and output escaping...

CVE-2022-46169

CVE-2022-46169 Эксплойт Эксплойт для уязвимости CVE-2022-46169 в Cacti 1.2.19 Опции root@kitploit: -u --url URL жертвы -f --forwarded значение X-Forwarded для обхода аутентификации -m --mode: check для проверки уязвимых серверов, или exploit для режима эксплуатации :D Использование root@kitploit:...

Typecho-Multiple-Vulnerabilities

Typecho Multiples Vulnérabilités Ce dépôt contient les exploits des vulnérabilités suivantes : CVE-2024-35538: Dans Typecho v1.3.0, il existe une vulnérabilité d'usurpation d'adresse IP client, qui permet à des acteurs malveillants de falsifier leurs adresses IP en spécifiant une IP arbitraire...

Limit Login Attempts WordPress - Stored Cross-site Scripting

Limit Login Attempts WordPress plugin 4.0.50 contains a stored cross-site scripting caused by not escaping IP addresses controlled via headers like X-Forwarded-For before outputting them in reports, letting unauthenticated attackers execute scripts in admin context. id: CVE-2021-24657 info: name:...

Traefik - Open Redirect

Traefik before 1.7.26, 2.2.8, and 2.3.0-rc3 contains an open redirect vulnerability in the X-Forwarded-Prefix header. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-15129 info: name:...

CVE-2025-48799-

CVE-2025-48799 – Удаленное выполнение кода в Apache Tomcat PoC Этот репозиторий содержит proof-of-concept эксплойт для CVE-2025-48799, уязвимости удаленного выполнения кода, обнаруженной в Apache Tomcat 9.0.48. Ошибка вызвана целочисленным переполнением в парсере HTTP-заголовков, которое может бы...

fireprox

FireProx Aperçu Avantages Avis de non-responsabilité Mainteneur Crédits Utilisation de base Installation Captures d’écran Contribuer Overview Être capable de masquer ou de faire tourner continuellement l'adresse IP source lors d'appels web peut être difficile ou coûteux. Un certain nombre d'outil...