PT-2024-40527

Name of the Vulnerable Software and Affected Versions: ZendHttpPhpEnvironmentRemoteAddress versions prior to 2.2.5 Description: The issue concerns the detection of the internet protocol IP address for an incoming proxied request via the X-Forwarded-For header. The class did not properly consider...

CasaOS Gateway vulnerable to incorrect identification of source IP addresses

Impact Unauthenticated attackers can execute arbitrary commands as root on CasaOS instances. Patches The problem was addressed by improving the detection of client IP addresses in 391dd7f. This patch is part of CasaOS 0.4.4. Workarounds Users should upgrade to CasaOS 0.4.4. If they can't, they...

Ke long shopping site management system vulnerability-vulnerability warning-the black bar safety net

Today to see a shopping site, readily guessing a backend admin, found that really have this background, and is directly into the background, and then verify what until after the jump back to the admin. asp this administrator login leaf surface. Since the flash is very fast, and did not see the...