Sql injection

The SQL injection vulnerability in the Hide My WP WordPress plugin versions = 6.2.3 is possible because of how the IP address is retrieved and used inside a SQL query. The function "hmwpgetuserip" tries to retrieve the IP address from multiple headers, including IP address headers that the user c...

CVE-2021-36916 WordPress Hide My WP premium plugin <= 6.2.3 - Unauthenticated SQL injection (SQLi) vulnerability

The SQL injection vulnerability in the Hide My WP WordPress plugin versions = 6.2.3 is possible because of how the IP address is retrieved and used inside a SQL query. The function "hmwpgetuserip" tries to retrieve the IP address from multiple headers, including IP address headers that the user c...

Hide My WP < 6.2.4 - Unauthenticated SQL Injection

The plugin does not escape the IP address retrieved via headers such as X-Forwarded-For before using it in a SQL statement, leading to an SQL injection...

Server-Side Request Forgery (SSRF)

ssrf-agent is vulnerable to server-side request forgery SSRF. The vulnerability exists due to an insufficient validation check in 'defaultIpChecker' function which allows an attacker to inject malicious ip address...

Tech CEO Pleads to Wire Fraud in IP Address Scheme

The CEO of a South Carolina technology firm has pleaded guilty to 20 counts of wire fraud in connection with an elaborate network of phony companies set up to obtain more than 735,000 Internet Protocol IP addresses from the nonprofit organization that leases the digital real estate to entities in...

Oracle Linux 8 : rust-toolset:ol8 (ELSA-2021-4270)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4270 advisory. rust-toolset 1.54.0-1 - Update to Rust and Cargo 1.54.0. 1.53.0-1 - Update to Rust and Cargo 1.53.0. rust 1.54.0-2 - Make std-static-wasm arch-specific to avoid...

CVE-2021-41653

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a crafted payload in an IP address input field...

Remote code execution

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a crafted payload in an IP address input field...

CVE-2021-41653

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a crafted payload in an IP address input field...

CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

UBUNTU-CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

Input validation

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

CVE-2021-3911

CVE-2021-3911 : In Cloudflare’s CFRPKI/OctoRPKI stack, a ROA response containing too many bits for the IP address can cause OctoRPKI to crash, i.e., an availability issue. The vulnerability is triggered when the ROA payload’s IP bit width exceeds expected limits, leading to a crash rather than a ...

CVE-2021-3911 Misconfigured IP address field in ROA leads to OctoRPKI crash

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

EulerOS 2.0 SP5 : golang (EulerOS-SA-2021-2661)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which in some situations allows...

CentOS 8 : rust-toolset:rhel8 (CESA-2021:4270)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4270 advisory. - rust: incorrect parsing of extraneous zero characters at the beginning of an IP address string CVE-2021-29922 Note that Nessus has not tested for this issue b...

GHSA-W6WW-FMFX-2X22 Misconfigured IP address field in ROA leads to OctoRPKI crash

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...