GHSA-5VJ8-G3QG-4QH6 X-Forwarded-For header allows brute-forcing autoblocked IP addresses

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

X-Forwarded-For header allows brute-forcing autoblocked IP addresses

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

UBUNTU-CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

Design/Logic Flaw

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

CVE-2023-28727

Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers...

CVE-2023-28727

Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers...

Authentication flaw

Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers...

CVE-2023-28727

Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers...

CVE-2023-28727

CVE-2023-28727 affects Panasonic AiSEG2 firmware versions 2.00J–2.93A. The issue is an authentication bypass caused by mishandling of the X-Forwarded-For header, enabling adjacent attackers to bypass authentication. Public sources in the connected data confirm the product (AiSEG2) and affected ra...

CVE-2023-28727

Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers...

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

CVE-2023-28727: Improper Authentication

Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers...

Panasonic AiSEG2 授权问题漏洞

Panasonic AiSEG2 is a series of home IoT products from Panasonic Corporation Panasonic, Japan. A security vulnerability exists in Panasonic AiSEG2 versions 2.00J through 2.93A, which stems from improper handling of the X-Forwarded-For header. An attacker could exploit the vulnerability to bypass...

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

CVE-2023-29141: Inconsistent Interpretation of HTTP Requests

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

CVE-2023-29141

CVE-2023-29141 affects MediaWiki prior to 1.35.10, 1.36.x up to 1.38.x before 1.38.6, and 1.39.x before 1.39.3. The issue: an auto-block can be triggered for an untrusted X-Forwarded-For header, potentially impacting user blocks and visibility of block-related data. Publicly disclosed details in ...

Exploit for Incorrect Authorization in Cacti

CVE-2022-46169 PoC: Authentication Bypass and Remote Code Exec...

Formidable Forms < 6.1 - IP Spoofing

The plugin uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections. 1. In WordPress's Settings Discussion page, add your IP address to the Disallowed Comment Keys field. This will block form submissio...