29 matches found
CVE-2022-46169
CVE-2022-46169 Cacti Blind Remote Code Execution Pre-Auth Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. Explanation This script bruteforces variables required to exploit this vulnerability. This exploit requires the following ...
CVE-2015-3224
CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...
CVE-2015-3224
Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...
PT-2026-103631
Name of the Vulnerable Software and Affected Versions simple-php-router versions prior to 5.4.1.8 Description The IpRestrictAccess middleware contains a flaw that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. By spoofing the X-Forwarded-For,...
CVE-2026-91997
evolution-api through version 2.3.7 contains a Prometheus metrics IP allowlist bypass . The root cause is an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, effectively disabling the IP whitelist. This allows unauthenticated remote attackers to acce...
EUVD-2026-78437
evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version,...
PT-2026-91937
evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version,...
CVE-2026-63641
A flaw was found in MagicMirror. The Socket.IO server in MagicMirror does not properly enforce the configured IP whitelist, allowing an unauthenticated client on an adjacent network to connect directly to module Socket.IO namespaces. This bypass enables the client to dispatch arbitrary events and...
NPM: MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions
NPM: MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions vulnerability discovered by ? in WordPress Npm magicmirror versions 2.37.0...
EUVD-2026-61070
MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, MagicMirror applies ipWhitelist only as Express middleware, while the Socket.IO server in js/server.js is attached directly to the HTTP server without equivalent IP allowlist, origin, or namespace authentication checks...
WeKan /metrics unconditionally trusts X-Forwarded-For, allowing whitelist IP spoofing (MetricsBleed)
WeKan /metrics Unconditionally Trusts X-Forwarded-For, Allowing Whitelist IP Spoofing MetricsBleed Vulnerability Overview WeKan's Prometheus /metrics endpoint restricts access via an IP whitelist only configured monitoring IPs are allowed. When determining the client's source IP, the code...
Ruby on Rails Web Console - IP Bypass RCE (CVE-2015-3224)
Exploits CVE-2015-3224 by bypassing Web Console IP restrictions with X-Forwarded-For: 0000::1 and evaluating backtick OS commands. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails Web Console IP whitelist bypass RCE CVE-2015-3224 — opens execute...
CVE-2025-68949: Use of Externally-Controlled Format String
n8n is an open source workflow automation platform. From 1.36.0 to before 2.2.0, the Webhook node’s IP whitelist validation performed partial string matching instead of exact IP comparison. As a result, an incoming request could be accepted if the source IP address merely contained the configured...
EUVD-2022-5675
Malicious code in bioql PyPI...
CVE-2023-30995
IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268...
CVE-2020-13485
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header...
Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Siemens Energy Omnivise T3000 vulnerable version: =8.2 SP3 fixed version: see solution section CVE number: CVE-2024-38876, CVE-2024-3887...
Design/Logic Flaw
IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268...
