EUVD-2022-29473

Malicious code in bioql PyPI...

CVE-2024-54450

An issue exists in Kurmi Provisioning Suite 7.9.0.33 where the application records an IP address from the X-Forwarded-For header during authentication rather than the actual source IP. This allows for the recording of a possibly forged IP address , which can subsequently be displayed in the My Ac...

CVE-2022-24594

CVE-2022-24594 affects waline 1.6.1. An attacker can submit messages with a forged IP address by manipulating the X-Forwarded-For header, enabling IP spoofing. Multiple connected sources (Red Hat advisory, Veracode note) indicate this can bypass IP-related checks such as IP frequency limits, affe...

CVE-2022-24594: Missing Authorization

In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address...

Apache HTTP Server 'mod_remoteip.c' IP Address Forgery Vulnerability

Apache HTTP Server is a popular WEB service program. Apache HTTP Server 'modremoteip.c' has an IP address forgery vulnerability that allows attackers to exploit the vulnerability to bypass security restrictions and conduct attacks such as spoofing...