Moneybird: Bypass password reset rate limit protection at moneybird.com/passwords

Attacker found a way to completely bypass our rate limit protection, allowing for other types of attacks. This involved changing the value of the X-Forwarded-For header. Attacker never got a 429 response from our servers when the value for each request is different. Injecting X-Forwarded-For :...

PT-2019-7425

Name of the Vulnerable Software and Affected Versions wti-like-post plugin versions prior to 1.4.3 Description The issue concerns SQL injection via the HTTP CLIENT IP, HTTP X FORWARDED FOR, HTTP X FORWARDED, HTTP FORWARDED FOR, or HTTP FORWARDED variable in the WtiLikePostProcessVote function...

CVE-2019-17240

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers...

CVE-2019-17213

The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...

CVE-2019-17213

The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...

Design/Logic Flaw

The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...

CVE-2019-17213

The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...

CVE-2019-17213

CVE-2019-17213 affects the WebARX plugin for WordPress (version 1.3.0). The connected records confirm an unauthenticated stored cross-site scripting (XSS) vulnerability that can be triggered via the URI or the X-Forwarded-For HTTP header. The root cause is an XSS flaw in how input in the request ...

CVE-2019-17213: Improper Neutralization of Input During Web Page Generation

The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...

PT-2019-15006

Name of the Vulnerable Software and Affected Versions WebARX plugin version 1.3.0 Description The issue allows for unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header. Recommendations For version 1.3.0, update to a newer version that contains a fix for this issue...

PT-2019-15027

Name of the Vulnerable Software and Affected Versions Bludit versions 3.2.9 through 3.9.2 Description The issue allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers. This can be exploited by sending requests with...

CVE-2019-17240: Improper Restriction of Excessive Authentication Attempts

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers...

PT-2020-14209

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 1.7.26 Traefik versions prior to 2.2.8 Traefik versions prior to 2.3.0-rc3 Description The issue concerns Traefik's handling of the X-Forwarded-Prefix header, where the Traefik API dashboard component does not validat...

New Relic: Host Header Injection

Reproduction 1- open reset link https://login.newrelic.com/passwords/forgot 2- Enter the victim's email address and click Reset and Email Password 3- Intercept the HTTP request in Burp Suite & add X-Forwarded Host Header and write attacker.com/.newrelic.com link will be like...

CVE-2016-10990

The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header...

Design/Logic Flaw

The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header...

PT-2019-7783

Name of the Vulnerable Software and Affected Versions wp-cerber plugin versions prior to 2.7 Description The issue allows for XSS via the X-Forwarded-For HTTP header. Recommendations For versions prior to 2.7, update to version 2.7 or later to resolve the issue...

CVE-2016-10990: Improper Neutralization of Input During Web Page Generation

The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header...

CVE-2018-16118: Improper Neutralization of Special Elements used in an OS Command

A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to execute arbitrary OS commands via shell metachracters in the "X-Forwarded-for" HTTP header...

PT-2019-9222

Name of the Vulnerable Software and Affected Versions Sophos XG firewall version 17.0.8 MR-8 Description A shell escape issue in the API Configuration component allows remote attackers to execute arbitrary OS commands. This is achieved by injecting shell metacharacters into the X-Forwarded-for HT...